chore(deps): update all patch dependencies by renovate[bot] · Pull Request #5176 · cds-snc/notification-manifests

renovate · 2026-09-05T06:59:31Z

This PR contains the following updates:

Package	Type	Update	Change	Pending
cert-manager (source)		patch	`v1.21.1` → `v1.21.2`	`v1.21.3`
fluent-bit (source)		patch	`0.58.1` → `0.58.3`
k8s-infra (source)		patch	`0.17.0` → `0.17.1`
reloader		patch	`2.2.16` → `2.2.18`	`2.2.19`
secrets-store-csi-driver-provider-aws		patch	`3.1.2` → `3.1.4`
yaml (source)	dependencies	patch	`2.9.0` → `2.9.1`

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

Review

Updates have been tested and work
If updates are AWS related, versions match the infrastructure (e.g. Lambda runtime, database, etc.)

Release Notes

cert-manager/cert-manager (cert-manager)

`v1.21.2`

Compare Source

cert-manager is the easiest way to automatically manage certificates in Kubernetes and OpenShift clusters.

v1.21.2 fixes controller and webhook panics, data races, ACME renewal and HTTP-01 solver bugs, and a Gateway API dnsNames bug. It stops the ACME and Vault issuers copying untrusted HTTP response bodies into status conditions and Events, and tightens ambient AWS credential use for namespaced Vault Issuers. It also updates Go and several dependencies to fix reported security vulnerabilities.

All users should upgrade.

Changes by Kind

Bug or Regression

ACME Issuer response bodies are no longer reflected into Issuer status conditions or Kubernetes Events. Only ACME problem documents are surfaced (bounded in length); other responses are reported by HTTP status code alone, with the full error available in the controller logs. (#9239, @FelixPhipps)
Cap ACME server response bodies at 16 MiB to guard against unbounded-body denial-of-service. (#9222, @FelixPhipps)
De-duplicate dnsNames when multiple Gateway/ListenerSet listeners share a Secret (#9234, @speer)
Fix certificate renewal windows using February 29 cron schedules across non-leap century years. (#9240, @wieghx)
Fix validating webhook panics when AdmissionReview requests omit optional fields, by routing identity, approval, and resource validation on the always-present Resource/SubResource fields and denying (rather than silently allowing) requests with an unset or mismatched resource. As a side effect, validation is now also enforced for equivalent-converted requests on non-v1 API versions, which previously could skip validation. (#9235, @lunarwhite)
Fixed HTTP-01 solver cleanup so that a solver ingress, pod or service that has already been deleted no longer fails the cleanup with a NotFound error. (#9278, @arpitjain099)
Fixed a bug where replaces field was being populated for the wrong issuer on issuer changes (#9236, @hjoshi123)
Fixed a data race in the ACME HTTP-01 self-check that could occur when custom DNS servers were configured. (#9313, @shashankvarma499)
Fixed a panic in the certificates-issuing controller when a CertificateRequest has a failure time set but no Ready condition. (#9238, @thc1006)
Fixed a race in pkg/scheduler where the cleanup of a fired timer could cancel a newer timer scheduled for the same object, silently dropping a rescheduled poll. (#9312, @shashankvarma499)
Fixed an issue where the body of a non-Vault HTTP response from spec.vault.server could be copied into the Vault Issuer's Ready condition and its Kubernetes Events. Such responses now report only the HTTP status code, and Vault's own error messages are truncated before being persisted. (#9262, @FelixPhipps)
Ingress-shim no longer removes the applyset label from cached Ingress and Gateway objects (#9314, @KR-Ravindra)
The ACME HTTP-01 self-check no longer reflects the fetched response body in Challenge.status.reason, preventing disclosure of internal response contents reachable via redirects. The response is still available in the controller's debug logs. (#9232, @FelixPhipps)
The vault issuer no longer authenticates to Vault using the cert-manager controller's ambient AWS credentials for AWS IAM auth on a namespaced Issuer, unless ambient credentials are explicitly enabled via --issuer-ambient-credentials. ClusterIssuer and explicit serviceAccountRef (IRSA) configurations are unaffected. (#9231, @FelixPhipps)

Other (Cleanup or Flake)

Upgrade Go to 1.26.6, which includes security fixes to the go command, and the crypto/tls, encoding/asn1, encoding/xml, html/template, net, net/http, and net/url packages. (#9151, @wallrj)
Upgrade Go to 1.26.8. (#9323, @wallrj)
Bump google.golang.org/grpc to v1.83.2 to fix reported security vulnerabilities (#9255, #9317)
Bump golang.org/x/crypto to v0.56.0 to fix reported security vulnerabilities (#9265)

fluent/helm-charts (fluent-bit)

`v0.58.3`

Compare Source

Changed

Update Fluent Bit OCI image to v5.1.3. (#759) @stevehipwell

`v0.58.2`

Compare Source

Changed

Update Fluent Bit OCI image to v5.1.2. (#755) @stevehipwell

SigNoz/charts (k8s-infra)

`v0.17.1`

Compare Source

Helm chart for collecting metrics and logs in K8s

What's Changed

fix(k8s-infra): grant persistentvolumes to otel-agent ClusterRole by @haidaraM @Nageshbansal in #916

Full Changelog: SigNoz/charts@signoz-operator-0.0.1...k8s-infra-0.17.1

aws/secrets-store-csi-driver-provider-aws (secrets-store-csi-driver-provider-aws)

`v3.1.4`

Compare Source

A Helm chart for the AWS Secrets Manager and Config Provider for Secret Store CSI Driver

What's Changed

build(deps): bump google.golang.org/grpc from 1.83.1 to 1.83.2 by @dependabot[bot] in #665
raising version bump to v3.1.4 by @sylvie7788 in #671
pin chart, values and installer yaml to v3.1.4 by @sylvie7788 in #672

New Contributors

@sylvie7788 made their first contribution in #671

Full Changelog: aws/secrets-store-csi-driver-provider-aws@3.1.3...3.1.4

`v3.1.3`

Compare Source

A Helm chart for the AWS Secrets Manager and Config Provider for Secret Store CSI Driver

What's Changed

Allow unsafe PR checkout on the integ and code review workflows. by @simonmarty in #645
build(deps): bump google.golang.org/grpc from 1.81.1 to 1.82.1 by @dependabot[bot] in #642
ci: use code-review skill with max effort on Opus 5 by @ThirdEyeSqueegee in #649
Extend traversal check to jmesPath objectAlias and mount path by @harsheejshah in #646
chore: bump version to 3.1.3 and update dependencies by @ThirdEyeSqueegee in #653
fix: default GOPROXY to module proxy in Docker build by @ThirdEyeSqueegee in #656
chore: v3.1.3 by @ThirdEyeSqueegee in #655

New Contributors

@harsheejshah made their first contribution in #646

Full Changelog: aws/secrets-store-csi-driver-provider-aws@3.1.2...3.1.3

eemeli/yaml (yaml)

`v2.9.1`

Compare Source

Limit recursive merge aliases (#685, #713)
Simplify line unfolding during quoted string parsing (#714)

Configuration

📅 Schedule: (in timezone America/Montreal)

Branch creation
- "every weekend"
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

github-actions · 2026-09-05T07:01:32Z

STAGING HELMFILE DIFF:

Comparing release=notify-documentation, chart=charts/notify-documentation, namespace=notification-canada-ca
Comparing release=notify-api, chart=charts/notify-api, namespace=notification-canada-ca
Comparing release=notify-jobs, chart=charts/notify-jobs, namespace=notification-canada-ca
Comparing release=notify-admin, chart=charts/notify-admin, namespace=notification-canada-ca
Comparing release=notify-document-download, chart=charts/notify-document-download, namespace=notification-canada-ca
Comparing release=notify-celery, chart=charts/notify-celery, namespace=notification-canada-ca
notification-canada-ca, notify-celery-beat, Deployment (apps) has changed:
...
                    key: POSTGRES_HOST
        containers:
-         - image: "public.ecr.aws/cds-snc/notify-api:03b9d0c"
+         - image: "public.ecr.aws/cds-snc/notify-api:fd48504"
            imagePullPolicy: Always
            name: notify-celery-beat
...
notification-canada-ca, notify-celery-core-tasks-burst, Deployment (apps) has changed:
...
                fieldRef:
                  fieldPath: spec.nodeName
-         image: "public.ecr.aws/cds-snc/notify-api:03b9d0c"
+         image: "public.ecr.aws/cds-snc/notify-api:fd48504"
          imagePullPolicy: IfNotPresent
          command: ["/bin/sh"]
...
        containers:
          - name: notify-celery-core-tasks-burst
-           image: "public.ecr.aws/cds-snc/notify-api:03b9d0c"
+           image: "public.ecr.aws/cds-snc/notify-api:fd48504"
            imagePullPolicy: Always
            volumeMounts:
...
notification-canada-ca, notify-celery-core-tasks-static, Deployment (apps) has changed:
...
                fieldRef:
                  fieldPath: spec.nodeName
-         image: "public.ecr.aws/cds-snc/notify-api:03b9d0c"
+         image: "public.ecr.aws/cds-snc/notify-api:fd48504"
          imagePullPolicy: IfNotPresent
          command: ["/bin/sh"]
...
        containers:
          - name: notify-celery-core-tasks-static
-           image: "public.ecr.aws/cds-snc/notify-api:03b9d0c"
+           image: "public.ecr.aws/cds-snc/notify-api:fd48504"
            imagePullPolicy: Always
            volumeMounts:
...
notification-canada-ca, notify-celery-delivery-receipts-burst, Deployment (apps) has changed:
...
                fieldRef:
                  fieldPath: spec.nodeName
-         image: "public.ecr.aws/cds-snc/notify-api:03b9d0c"
+         image: "public.ecr.aws/cds-snc/notify-api:fd48504"
          imagePullPolicy: IfNotPresent
          command: ["/bin/sh"]
...
        containers:
          - name: notify-celery-delivery-receipts-burst
-           image: "public.ecr.aws/cds-snc/notify-api:03b9d0c"
+           image: "public.ecr.aws/cds-snc/notify-api:fd48504"
            imagePullPolicy: Always
            volumeMounts:
...
notification-canada-ca, notify-celery-email-send-burst, Deployment (apps) has changed:
...
                fieldRef:
                  fieldPath: spec.nodeName
-         image: "public.ecr.aws/cds-snc/notify-api:03b9d0c"
+         image: "public.ecr.aws/cds-snc/notify-api:fd48504"
          imagePullPolicy: IfNotPresent
          command: ["/bin/sh"]
...
        containers:
          - name: notify-celery-email-send-burst
-           image: "public.ecr.aws/cds-snc/notify-api:03b9d0c"
+           image: "public.ecr.aws/cds-snc/notify-api:fd48504"
            imagePullPolicy: Always
            volumeMounts:
...
notification-canada-ca, notify-celery-email-send-static, Deployment (apps) has changed:
...
                fieldRef:
                  fieldPath: spec.nodeName
-         image: "public.ecr.aws/cds-snc/notify-api:03b9d0c"
+         image: "public.ecr.aws/cds-snc/notify-api:fd48504"
          imagePullPolicy: IfNotPresent
          command: ["/bin/sh"]
...
        containers:
          - name: notify-celery-email-send-static
-           image: "public.ecr.aws/cds-snc/notify-api:03b9d0c"
+           image: "public.ecr.aws/cds-snc/notify-api:fd48504"
            imagePullPolicy: Always
            volumeMounts:
...
notification-canada-ca, notify-celery-generate-reports-static, Deployment (apps) has changed:
...
                fieldRef:
                  fieldPath: spec.nodeName
-         image: "public.ecr.aws/cds-snc/notify-api:03b9d0c"
+         image: "public.ecr.aws/cds-snc/notify-api:fd48504"
          imagePullPolicy: IfNotPresent
          command: ["/bin/sh"]
...
        containers:
          - name: notify-celery-generate-reports-static
-           image: "public.ecr.aws/cds-snc/notify-api:03b9d0c"
+           image: "public.ecr.aws/cds-snc/notify-api:fd48504"
            imagePullPolicy: Always
            volumeMounts:
...
notification-canada-ca, notify-celery-jobs-ondemand, Deployment (apps) has changed:
...
                fieldRef:
                  fieldPath: spec.nodeName
-         image: "public.ecr.aws/cds-snc/notify-api:03b9d0c"
+         image: "public.ecr.aws/cds-snc/notify-api:fd48504"
          imagePullPolicy: IfNotPresent
          command: ["/bin/sh"]
...
        containers:
          - name: notify-celery-jobs-ondemand
-           image: "public.ecr.aws/cds-snc/notify-api:03b9d0c"
+           image: "public.ecr.aws/cds-snc/notify-api:fd48504"
            imagePullPolicy: Always
            volumeMounts:
...
notification-canada-ca, notify-celery-nightly-ondemand, Deployment (apps) has changed:
...
                fieldRef:
                  fieldPath: spec.nodeName
-         image: "public.ecr.aws/cds-snc/notify-api:03b9d0c"
+         image: "public.ecr.aws/cds-snc/notify-api:fd48504"
          imagePullPolicy: IfNotPresent
          command: ["/bin/sh"]
...
        containers:
          - name: notify-celery-nightly-ondemand
-           image: "public.ecr.aws/cds-snc/notify-api:03b9d0c"
+           image: "public.ecr.aws/cds-snc/notify-api:fd48504"
            imagePullPolicy: Always
            volumeMounts:
...
notification-canada-ca, notify-celery-periodic-burst, Deployment (apps) has changed:
...
                fieldRef:
                  fieldPath: spec.nodeName
-         image: "public.ecr.aws/cds-snc/notify-api:03b9d0c"
+         image: "public.ecr.aws/cds-snc/notify-api:fd48504"
          imagePullPolicy: IfNotPresent
          command: ["/bin/sh"]
...
        containers:
          - name: notify-celery-periodic-burst
-           image: "public.ecr.aws/cds-snc/notify-api:03b9d0c"
+           image: "public.ecr.aws/cds-snc/notify-api:fd48504"
            imagePullPolicy: Always
            volumeMounts:
...
notification-canada-ca, notify-celery-periodic-static, Deployment (apps) has changed:
...
                fieldRef:
                  fieldPath: spec.nodeName
-         image: "public.ecr.aws/cds-snc/notify-api:03b9d0c"
+         image: "public.ecr.aws/cds-snc/notify-api:fd48504"
          imagePullPolicy: IfNotPresent
          command: ["/bin/sh"]
...
        containers:
          - name: notify-celery-periodic-static
-           image: "public.ecr.aws/cds-snc/notify-api:03b9d0c"
+           image: "public.ecr.aws/cds-snc/notify-api:fd48504"
            imagePullPolicy: Always
            volumeMounts:
...
notification-canada-ca, notify-celery-sms-dedicated-static, Deployment (apps) has changed:
...
                    key: POSTGRES_HOST
        containers:
-         - image: "public.ecr.aws/cds-snc/notify-api:03b9d0c"
+         - image: "public.ecr.aws/cds-snc/notify-api:fd48504"
            imagePullPolicy: Always
            name: notify-celery-sms-dedicated-static
...
notification-canada-ca, notify-celery-sms-send-burst, Deployment (apps) has changed:
...
                fieldRef:
                  fieldPath: spec.nodeName
-         image: "public.ecr.aws/cds-snc/notify-api:03b9d0c"
+         image: "public.ecr.aws/cds-snc/notify-api:fd48504"
          imagePullPolicy: IfNotPresent
          command: ["/bin/sh"]
...
        containers:
          - name: notify-celery-sms-send-burst
-           image: "public.ecr.aws/cds-snc/notify-api:03b9d0c"
+           image: "public.ecr.aws/cds-snc/notify-api:fd48504"
            imagePullPolicy: Always
            volumeMounts:
...
notification-canada-ca, notify-celery-sms-send-static, Deployment (apps) has changed:
...
                fieldRef:
                  fieldPath: spec.nodeName
-         image: "public.ecr.aws/cds-snc/notify-api:03b9d0c"
+         image: "public.ecr.aws/cds-snc/notify-api:fd48504"
          imagePullPolicy: IfNotPresent
          command: ["/bin/sh"]
...
        containers:
          - name: notify-celery-sms-send-static
-           image: "public.ecr.aws/cds-snc/notify-api:03b9d0c"
+           image: "public.ecr.aws/cds-snc/notify-api:fd48504"
            imagePullPolicy: Always
            volumeMounts:
...

Comparing release=k8s-event-logger, chart=/home/runner/.cache/helmfile/oci__ghcr_io/deliveryhero/helm-charts/k8s-event-logger/1.1.8/k8s-event-logger, namespace=amazon-cloudwatch
Comparing release=karpenter-crd, chart=/home/runner/.cache/helmfile/oci__public_ecr_aws/karpenter/karpenter-crd/1.15.0/karpenter-crd, namespace=karpenter
Comparing release=karpenter, chart=/home/runner/.cache/helmfile/oci__public_ecr_aws/karpenter/karpenter/1.15.0/karpenter, namespace=karpenter
Comparing release=karpenter-nodepool, chart=charts/karpenter-nodepool, namespace=karpenter
Comparing release=priority-classes, chart=deliveryhero/priority-class, namespace=kube-system
Comparing release=aws-secrets-provider, chart=aws-secrets-manager/secrets-store-csi-driver-provider-aws, namespace=kube-system
kube-system, aws-secrets-provider-secrets-store-csi-driver-provider-aws, DaemonSet (apps) has changed:
...
    name: aws-secrets-provider-secrets-store-csi-driver-provider-aws
    labels:
-     helm.sh/chart: secrets-store-csi-driver-provider-aws-3.1.2
+     helm.sh/chart: secrets-store-csi-driver-provider-aws-3.1.4
      app.kubernetes.io/name: secrets-store-csi-driver-provider-aws
      app.kubernetes.io/instance: aws-secrets-provider
...
      metadata:
        labels:
-         helm.sh/chart: secrets-store-csi-driver-provider-aws-3.1.2
+         helm.sh/chart: secrets-store-csi-driver-provider-aws-3.1.4
          app.kubernetes.io/name: secrets-store-csi-driver-provider-aws
          app.kubernetes.io/instance: aws-secrets-provider
...
        containers:
          - name: provider-aws-installer
-           image: public.ecr.aws/aws-secrets-manager/secrets-store-csi-driver-provider-aws:3.1.2
+           image: public.ecr.aws/aws-secrets-manager/secrets-store-csi-driver-provider-aws:3.1.4
            imagePullPolicy: IfNotPresent
            args:
...
kube-system, aws-secrets-provider-secrets-store-csi-driver-provider-aws, ServiceAccount (v1) has changed:
...
    namespace: kube-system
    labels:
-     helm.sh/chart: secrets-store-csi-driver-provider-aws-3.1.2
+     helm.sh/chart: secrets-store-csi-driver-provider-aws-3.1.4
      app.kubernetes.io/name: secrets-store-csi-driver-provider-aws
      app.kubernetes.io/instance: aws-secrets-provider
...
kube-system, aws-secrets-provider-secrets-store-csi-driver-provider-aws-cluster-role, ClusterRole (rbac.authorization.k8s.io) has changed:
...
    name: aws-secrets-provider-secrets-store-csi-driver-provider-aws-cluster-role
    labels:
-     helm.sh/chart: secrets-store-csi-driver-provider-aws-3.1.2
+     helm.sh/chart: secrets-store-csi-driver-provider-aws-3.1.4
      app.kubernetes.io/name: secrets-store-csi-driver-provider-aws
      app.kubernetes.io/instance: aws-secrets-provider
...
kube-system, aws-secrets-provider-secrets-store-csi-driver-provider-aws-cluster-role-binding, ClusterRoleBinding (rbac.authorization.k8s.io) has changed:
...
    name: aws-secrets-provider-secrets-store-csi-driver-provider-aws-cluster-role-binding
    labels:
-     helm.sh/chart: secrets-store-csi-driver-provider-aws-3.1.2
+     helm.sh/chart: secrets-store-csi-driver-provider-aws-3.1.4
      app.kubernetes.io/name: secrets-store-csi-driver-provider-aws
      app.kubernetes.io/instance: aws-secrets-provider
...
kube-system, secretproviderclasses-admin-role, ClusterRole (rbac.authorization.k8s.io) has changed:
...
      app.kubernetes.io/managed-by: "Helm"
      app.kubernetes.io/name: "secrets-store-csi-driver"
-     app.kubernetes.io/version: "1.6.0"
+     app.kubernetes.io/version: "1.6.1"
      app: secrets-store-csi-driver
-     helm.sh/chart: "secrets-store-csi-driver-1.6.0"
+     helm.sh/chart: "secrets-store-csi-driver-1.6.1"
      rbac.authorization.k8s.io/aggregate-to-admin: "true"
      rbac.authorization.k8s.io/aggregate-to-edit: "true"
...
kube-system, secretproviderclasses-role, ClusterRole (rbac.authorization.k8s.io) has changed:
...
      app.kubernetes.io/managed-by: "Helm"
      app.kubernetes.io/name: "secrets-store-csi-driver"
-     app.kubernetes.io/version: "1.6.0"
+     app.kubernetes.io/version: "1.6.1"
      app: secrets-store-csi-driver
-     helm.sh/chart: "secrets-store-csi-driver-1.6.0"
+     helm.sh/chart: "secrets-store-csi-driver-1.6.1"
  rules:
  - apiGroups:
...
kube-system, secretproviderclasses-rolebinding, ClusterRoleBinding (rbac.authorization.k8s.io) has changed:
...
      app.kubernetes.io/managed-by: "Helm"
      app.kubernetes.io/name: "secrets-store-csi-driver"
-     app.kubernetes.io/version: "1.6.0"
+     app.kubernetes.io/version: "1.6.1"
      app: secrets-store-csi-driver
-     helm.sh/chart: "secrets-store-csi-driver-1.6.0"
+     helm.sh/chart: "secrets-store-csi-driver-1.6.1"
  roleRef:
    apiGroup: rbac.authorization.k8s.io
...
kube-system, secretproviderclasses-viewer-role, ClusterRole (rbac.authorization.k8s.io) has changed:
...
      app.kubernetes.io/managed-by: "Helm"
      app.kubernetes.io/name: "secrets-store-csi-driver"
-     app.kubernetes.io/version: "1.6.0"
+     app.kubernetes.io/version: "1.6.1"
      app: secrets-store-csi-driver
-     helm.sh/chart: "secrets-store-csi-driver-1.6.0"
+     helm.sh/chart: "secrets-store-csi-driver-1.6.1"
      rbac.authorization.k8s.io/aggregate-to-view: "true"
    name: secretproviderclasses-viewer-role
...
kube-system, secretproviderclasspodstatuses-viewer-role, ClusterRole (rbac.authorization.k8s.io) has changed:
...
      app.kubernetes.io/managed-by: "Helm"
      app.kubernetes.io/name: "secrets-store-csi-driver"
-     app.kubernetes.io/version: "1.6.0"
+     app.kubernetes.io/version: "1.6.1"
      app: secrets-store-csi-driver
-     helm.sh/chart: "secrets-store-csi-driver-1.6.0"
+     helm.sh/chart: "secrets-store-csi-driver-1.6.1"
      rbac.authorization.k8s.io/aggregate-to-view: "true"
    name: secretproviderclasspodstatuses-viewer-role
...
kube-system, secretprovidersyncing-role, ClusterRole (rbac.authorization.k8s.io) has changed:
...
      app.kubernetes.io/managed-by: "Helm"
      app.kubernetes.io/name: "secrets-store-csi-driver"
-     app.kubernetes.io/version: "1.6.0"
+     app.kubernetes.io/version: "1.6.1"
      app: secrets-store-csi-driver
-     helm.sh/chart: "secrets-store-csi-driver-1.6.0"
+     helm.sh/chart: "secrets-store-csi-driver-1.6.1"
  rules:
  - apiGroups:
...
kube-system, secretprovidersyncing-rolebinding, ClusterRoleBinding (rbac.authorization.k8s.io) has changed:
...
      app.kubernetes.io/managed-by: "Helm"
      app.kubernetes.io/name: "secrets-store-csi-driver"
-     app.kubernetes.io/version: "1.6.0"
+     app.kubernetes.io/version: "1.6.1"
      app: secrets-store-csi-driver
-     helm.sh/chart: "secrets-store-csi-driver-1.6.0"
+     helm.sh/chart: "secrets-store-csi-driver-1.6.1"
  roleRef:
    apiGroup: rbac.authorization.k8s.io
...
kube-system, secrets-store-csi-driver, DaemonSet (apps) has changed:
...
      app.kubernetes.io/managed-by: "Helm"
      app.kubernetes.io/name: "secrets-store-csi-driver"
-     app.kubernetes.io/version: "1.6.0"
+     app.kubernetes.io/version: "1.6.1"
      app: secrets-store-csi-driver
-     helm.sh/chart: "secrets-store-csi-driver-1.6.0"
+     helm.sh/chart: "secrets-store-csi-driver-1.6.1"
  spec:
    selector:
...
          app.kubernetes.io/managed-by: "Helm"
          app.kubernetes.io/name: "secrets-store-csi-driver"
-         app.kubernetes.io/version: "1.6.0"
+         app.kubernetes.io/version: "1.6.1"
          app: secrets-store-csi-driver
-         helm.sh/chart: "secrets-store-csi-driver-1.6.0"
+         helm.sh/chart: "secrets-store-csi-driver-1.6.1"
        annotations:
          kubectl.kubernetes.io/default-container: secrets-store
...
                memory: 20Mi
          - name: secrets-store
-           image: "registry.k8s.io/csi-secrets-store/driver:v1.6.0"
+           image: "registry.k8s.io/csi-secrets-store/driver:v1.6.1"
            args:
              - "--endpoint=$(CSI_ENDPOINT)"
...
kube-system, secrets-store-csi-driver, ServiceAccount (v1) has changed:
...
      app.kubernetes.io/managed-by: "Helm"
      app.kubernetes.io/name: "secrets-store-csi-driver"
-     app.kubernetes.io/version: "1.6.0"
+     app.kubernetes.io/version: "1.6.1"
      app: secrets-store-csi-driver
-     helm.sh/chart: "secrets-store-csi-driver-1.6.0"
+     helm.sh/chart: "secrets-store-csi-driver-1.6.1"
kube-system, secrets-store-csi-driver-keep-crds, ClusterRole (rbac.authorization.k8s.io) has changed:
...
      app.kubernetes.io/managed-by: "Helm"
      app.kubernetes.io/name: "secrets-store-csi-driver"
-     app.kubernetes.io/version: "1.6.0"
+     app.kubernetes.io/version: "1.6.1"
      app: secrets-store-csi-driver
-     helm.sh/chart: "secrets-store-csi-driver-1.6.0"
+     helm.sh/chart: "secrets-store-csi-driver-1.6.1"
    annotations:
      helm.sh/hook: pre-upgrade
...
kube-system, secrets-store-csi-driver-keep-crds, ClusterRoleBinding (rbac.authorization.k8s.io) has changed:
...
      app.kubernetes.io/managed-by: "Helm"
      app.kubernetes.io/name: "secrets-store-csi-driver"
-     app.kubernetes.io/version: "1.6.0"
+     app.kubernetes.io/version: "1.6.1"
      app: secrets-store-csi-driver
-     helm.sh/chart: "secrets-store-csi-driver-1.6.0"
+     helm.sh/chart: "secrets-store-csi-driver-1.6.1"
    annotations:
      helm.sh/hook: pre-upgrade
...
kube-system, secrets-store-csi-driver-keep-crds, Job (batch) has changed:
...
      app.kubernetes.io/managed-by: "Helm"
      app.kubernetes.io/name: "secrets-store-csi-driver"
-     app.kubernetes.io/version: "1.6.0"
+     app.kubernetes.io/version: "1.6.1"
      app: secrets-store-csi-driver
-     helm.sh/chart: "secrets-store-csi-driver-1.6.0"
+     helm.sh/chart: "secrets-store-csi-driver-1.6.1"
    annotations:
      helm.sh/hook: pre-upgrade
...
        containers:
        - name: crds-keep
-         image: "registry.k8s.io/csi-secrets-store/driver-crds:v1.6.0"
+         image: "registry.k8s.io/csi-secrets-store/driver-crds:v1.6.1"
          args:
          - patch
...
kube-system, secrets-store-csi-driver-keep-crds, ServiceAccount (v1) has changed:
...
      app.kubernetes.io/managed-by: "Helm"
      app.kubernetes.io/name: "secrets-store-csi-driver"
-     app.kubernetes.io/version: "1.6.0"
+     app.kubernetes.io/version: "1.6.1"
      app: secrets-store-csi-driver
-     helm.sh/chart: "secrets-store-csi-driver-1.6.0"
+     helm.sh/chart: "secrets-store-csi-driver-1.6.1"
    annotations:
      helm.sh/hook: pre-upgrade
...
kube-system, secrets-store-csi-driver-upgrade-crds, ClusterRole (rbac.authorization.k8s.io) has changed:
...
      app.kubernetes.io/managed-by: "Helm"
      app.kubernetes.io/name: "secrets-store-csi-driver"
-     app.kubernetes.io/version: "1.6.0"
+     app.kubernetes.io/version: "1.6.1"
      app: secrets-store-csi-driver
-     helm.sh/chart: "secrets-store-csi-driver-1.6.0"
+     helm.sh/chart: "secrets-store-csi-driver-1.6.1"
    annotations:
      helm.sh/hook: pre-install,pre-upgrade
...
kube-system, secrets-store-csi-driver-upgrade-crds, ClusterRoleBinding (rbac.authorization.k8s.io) has changed:
...
      app.kubernetes.io/managed-by: "Helm"
      app.kubernetes.io/name: "secrets-store-csi-driver"
-     app.kubernetes.io/version: "1.6.0"
+     app.kubernetes.io/version: "1.6.1"
      app: secrets-store-csi-driver
-     helm.sh/chart: "secrets-store-csi-driver-1.6.0"
+     helm.sh/chart: "secrets-store-csi-driver-1.6.1"
    annotations:
      helm.sh/hook: pre-install,pre-upgrade
...
kube-system, secrets-store-csi-driver-upgrade-crds, Job (batch) has changed:
...
      app.kubernetes.io/managed-by: "Helm"
      app.kubernetes.io/name: "secrets-store-csi-driver"
-     app.kubernetes.io/version: "1.6.0"
+     app.kubernetes.io/version: "1.6.1"
      app: secrets-store-csi-driver
-     helm.sh/chart: "secrets-store-csi-driver-1.6.0"
+     helm.sh/chart: "secrets-store-csi-driver-1.6.1"
    annotations:
      helm.sh/hook: pre-install,pre-upgrade
...
        containers:
        - name: crds-upgrade
-         image: "registry.k8s.io/csi-secrets-store/driver-crds:v1.6.0"
+         image: "registry.k8s.io/csi-secrets-store/driver-crds:v1.6.1"
          args:
          - apply
...
kube-system, secrets-store-csi-driver-upgrade-crds, ServiceAccount (v1) has changed:
...
      app.kubernetes.io/managed-by: "Helm"
      app.kubernetes.io/name: "secrets-store-csi-driver"
-     app.kubernetes.io/version: "1.6.0"
+     app.kubernetes.io/version: "1.6.1"
      app: secrets-store-csi-driver
-     helm.sh/chart: "secrets-store-csi-driver-1.6.0"
+     helm.sh/chart: "secrets-store-csi-driver-1.6.1"
    annotations:
      helm.sh/hook: pre-install,pre-upgrade
...
kube-system, secrets-store.csi.k8s.io, CSIDriver (storage.k8s.io) has changed:
...
      app.kubernetes.io/managed-by: "Helm"
      app.kubernetes.io/name: "secrets-store-csi-driver"
-     app.kubernetes.io/version: "1.6.0"
+     app.kubernetes.io/version: "1.6.1"
      app: secrets-store-csi-driver
-     helm.sh/chart: "secrets-store-csi-driver-1.6.0"
+     helm.sh/chart: "secrets-store-csi-driver-1.6.1"
  spec:
    podInfoOnMount: true
...

Comparing release=reloader, chart=stakater/reloader, namespace=kube-system
kube-system, reloader-reloader, Deployment (apps) has changed:
...
      app.kubernetes.io/name: reloader
      app.kubernetes.io/instance: "reloader"
-     helm.sh/chart: "reloader-2.2.16"
-     chart: "reloader-2.2.16"
+     helm.sh/chart: "reloader-2.2.18"
+     chart: "reloader-2.2.18"
      heritage: "Helm"
      app.kubernetes.io/managed-by: "Helm"
-     app.kubernetes.io/version: "v1.4.21"
+     app.kubernetes.io/version: "v1.4.22"
      group: com.stakater.platform
      provider: stakater
-     version: v1.4.21
+     version: v1.4.22
    name: reloader-reloader
    namespace: kube-system
...
          app.kubernetes.io/name: reloader
          app.kubernetes.io/instance: "reloader"
-         helm.sh/chart: "reloader-2.2.16"
-         chart: "reloader-2.2.16"
+         helm.sh/chart: "reloader-2.2.18"
+         chart: "reloader-2.2.18"
          heritage: "Helm"
          app.kubernetes.io/managed-by: "Helm"
-         app.kubernetes.io/version: "v1.4.21"
+         app.kubernetes.io/version: "v1.4.22"
          group: com.stakater.platform
          provider: stakater
-         version: v1.4.21
+         version: v1.4.22
      spec:
        containers:
-       - image: "ghcr.io/stakater/reloader:v1.4.21"
+       - image: "ghcr.io/stakater/reloader:v1.4.22"
          imagePullPolicy: IfNotPresent
          name: reloader-reloader
...
kube-system, reloader-reloader, ServiceAccount (v1) has changed:
...
      app.kubernetes.io/name: reloader
      app.kubernetes.io/instance: "reloader"
-     helm.sh/chart: "reloader-2.2.16"
-     chart: "reloader-2.2.16"
+     helm.sh/chart: "reloader-2.2.18"
+     chart: "reloader-2.2.18"
      heritage: "Helm"
      app.kubernetes.io/managed-by: "Helm"
-     app.kubernetes.io/version: "v1.4.21"
+     app.kubernetes.io/version: "v1.4.22"
    name: reloader-reloader
    namespace: kube-system
kube-system, reloader-reloader-metadata-role, Role (rbac.authorization.k8s.io) has changed:
...
      app.kubernetes.io/name: reloader
      app.kubernetes.io/instance: "reloader"
-     helm.sh/chart: "reloader-2.2.16"
-     chart: "reloader-2.2.16"
+     helm.sh/chart: "reloader-2.2.18"
+     chart: "reloader-2.2.18"
      heritage: "Helm"
      app.kubernetes.io/managed-by: "Helm"
-     app.kubernetes.io/version: "v1.4.21"
+     app.kubernetes.io/version: "v1.4.22"
    name: reloader-reloader-metadata-role
    namespace: kube-system
...
kube-system, reloader-reloader-metadata-role-binding, RoleBinding (rbac.authorization.k8s.io) has changed:
...
      app.kubernetes.io/name: reloader
      app.kubernetes.io/instance: "reloader"
-     helm.sh/chart: "reloader-2.2.16"
-     chart: "reloader-2.2.16"
+     helm.sh/chart: "reloader-2.2.18"
+     chart: "reloader-2.2.18"
      heritage: "Helm"
      app.kubernetes.io/managed-by: "Helm"
-     app.kubernetes.io/version: "v1.4.21"
+     app.kubernetes.io/version: "v1.4.22"
    name: reloader-reloader-metadata-role-binding
    namespace: kube-system
...
kube-system, reloader-reloader-role, ClusterRole (rbac.authorization.k8s.io) has changed:
...
      app.kubernetes.io/name: reloader
      app.kubernetes.io/instance: "reloader"
-     helm.sh/chart: "reloader-2.2.16"
-     chart: "reloader-2.2.16"
+     helm.sh/chart: "reloader-2.2.18"
+     chart: "reloader-2.2.18"
      heritage: "Helm"
      app.kubernetes.io/managed-by: "Helm"
-     app.kubernetes.io/version: "v1.4.21"
+     app.kubernetes.io/version: "v1.4.22"
    name: reloader-reloader-role
  rules:
...
kube-system, reloader-reloader-role-binding, ClusterRoleBinding (rbac.authorization.k8s.io) has changed:
...
      app.kubernetes.io/name: reloader
      app.kubernetes.io/instance: "reloader"
-     helm.sh/chart: "reloader-2.2.16"
-     chart: "reloader-2.2.16"
+     helm.sh/chart: "reloader-2.2.18"
+     chart: "reloader-2.2.18"
      heritage: "Helm"
      app.kubernetes.io/managed-by: "Helm"
-     app.kubernetes.io/version: "v1.4.21"
+     app.kubernetes.io/version: "v1.4.22"
    name: reloader-reloader-role-binding
  roleRef:
...

Comparing release=kube-state-metrics, chart=prometheus-community/kube-state-metrics, namespace=kube-system
Comparing release=ingress, chart=charts/nginx-ingress, namespace=nginx
Comparing release=xray-daemon, chart=okgolove/aws-xray, namespace=xray
Comparing release=ipv4-geolocate, chart=charts/ipv4-geolocate, namespace=notification-canada-ca
Comparing release=image-pull-secrets, chart=charts/image-pull-secrets, namespace=kube-system
Comparing release=fb-agent, chart=fluent/fluent-bit, namespace=amazon-cloudwatch
amazon-cloudwatch, fb-agent-fluent-bit, ClusterRole (rbac.authorization.k8s.io) has changed:
...
    name: fb-agent-fluent-bit
    labels:
-     helm.sh/chart: fluent-bit-0.58.1
+     helm.sh/chart: fluent-bit-0.58.3
      app.kubernetes.io/name: fluent-bit
      app.kubernetes.io/instance: fb-agent
-     app.kubernetes.io/version: "5.1.1"
+     app.kubernetes.io/version: "5.1.3"
      app.kubernetes.io/managed-by: Helm
  rules:
...
amazon-cloudwatch, fb-agent-fluent-bit, ClusterRoleBinding (rbac.authorization.k8s.io) has changed:
...
    name: fb-agent-fluent-bit
    labels:
-     helm.sh/chart: fluent-bit-0.58.1
+     helm.sh/chart: fluent-bit-0.58.3
      app.kubernetes.io/name: fluent-bit
      app.kubernetes.io/instance: fb-agent
-     app.kubernetes.io/version: "5.1.1"
+     app.kubernetes.io/version: "5.1.3"
      app.kubernetes.io/managed-by: Helm
  roleRef:
...
amazon-cloudwatch, fb-agent-fluent-bit, ConfigMap (v1) has changed:
...
    namespace: amazon-cloudwatch
    labels:
-     helm.sh/chart: fluent-bit-0.58.1
+     helm.sh/chart: fluent-bit-0.58.3
      app.kubernetes.io/name: fluent-bit
      app.kubernetes.io/instance: fb-agent
-     app.kubernetes.io/version: "5.1.1"
+     app.kubernetes.io/version: "5.1.3"
      app.kubernetes.io/managed-by: Helm
  data:
...
amazon-cloudwatch, fb-agent-fluent-bit, DaemonSet (apps) has changed:
...
    namespace: amazon-cloudwatch
    labels:
-     helm.sh/chart: fluent-bit-0.58.1
+     helm.sh/chart: fluent-bit-0.58.3
      app.kubernetes.io/name: fluent-bit
      app.kubernetes.io/instance: fb-agent
-     app.kubernetes.io/version: "5.1.1"
+     app.kubernetes.io/version: "5.1.3"
      app.kubernetes.io/managed-by: Helm
  spec:
...
          app.kubernetes.io/instance: fb-agent
        annotations:
-         checksum/config: 5fd0024457529ab7bba95f617ac491a8e0d95a7f37d254dbcd00da952d772e82
+         checksum/config: cb07c5b2a6eb9cf6583babfb6452f2a3b4175ff70af5a04dd84f56253209ce01
      spec:
        
...
        containers:
          - name: fluent-bit
-           image: "cr.fluentbit.io/fluent/fluent-bit:5.1.1"
+           image: "cr.fluentbit.io/fluent/fluent-bit:5.1.3"
            imagePullPolicy: IfNotPresent
            env:
...
amazon-cloudwatch, fb-agent-fluent-bit, Service (v1) has changed:
...
    namespace: amazon-cloudwatch
    labels:
-     helm.sh/chart: fluent-bit-0.58.1
+     helm.sh/chart: fluent-bit-0.58.3
      app.kubernetes.io/name: fluent-bit
      app.kubernetes.io/instance: fb-agent
-     app.kubernetes.io/version: "5.1.1"
+     app.kubernetes.io/version: "5.1.3"
      app.kubernetes.io/managed-by: Helm
  spec:
...
amazon-cloudwatch, fb-agent-fluent-bit, ServiceAccount (v1) has changed:
...
    namespace: amazon-cloudwatch
    labels:
-     helm.sh/chart: fluent-bit-0.58.1
+     helm.sh/chart: fluent-bit-0.58.3
      app.kubernetes.io/name: fluent-bit
      app.kubernetes.io/instance: fb-agent
-     app.kubernetes.io/version: "5.1.1"
+     app.kubernetes.io/version: "5.1.3"
      app.kubernetes.io/managed-by: Helm

Comparing release=cert-manager, chart=jetstack/cert-manager, namespace=cert-manager
cert-manager, cert-manager, Deployment (apps) has changed:
...
      app.kubernetes.io/instance: cert-manager
      app.kubernetes.io/component: "controller"
-     app.kubernetes.io/version: "v1.21.1"
+     app.kubernetes.io/version: "v1.21.2"
      app.kubernetes.io/managed-by: Helm
-     helm.sh/chart: cert-manager-v1.21.1
+     helm.sh/chart: cert-manager-v1.21.2
  spec:
    replicas: 1
...
          app.kubernetes.io/instance: cert-manager
          app.kubernetes.io/component: "controller"
-         app.kubernetes.io/version: "v1.21.1"
+         app.kubernetes.io/version: "v1.21.2"
          app.kubernetes.io/managed-by: Helm
-         helm.sh/chart: cert-manager-v1.21.1
+         helm.sh/chart: cert-manager-v1.21.2
        annotations:
          prometheus.io/path: "/metrics"
...
        containers:
          - name: cert-manager-controller
-           image: "quay.io/jetstack/cert-manager-controller:v1.21.1"
+           image: "quay.io/jetstack/cert-manager-controller:v1.21.2"
            imagePullPolicy: IfNotPresent
            args:
...
            - --cluster-resource-namespace=$(POD_NAMESPACE)
            - --leader-election-namespace=kube-system
-           - --acme-http01-solver-image=quay.io/jetstack/cert-manager-acmesolver:v1.21.1
+           - --acme-http01-solver-image=quay.io/jetstack/cert-manager-acmesolver:v1.21.2
            - --max-concurrent-challenges=60
            ports:
...
cert-manager, cert-manager, Service (v1) has changed:
...
      app.kubernetes.io/instance: cert-manager
      app.kubernetes.io/component: "controller"
-     app.kubernetes.io/version: "v1.21.1"
+     app.kubernetes.io/version: "v1.21.2"
      app.kubernetes.io/managed-by: Helm
-     helm.sh/chart: cert-manager-v1.21.1
+     helm.sh/chart: cert-manager-v1.21.2
  spec:
    type: ClusterIP
...
cert-manager, cert-manager, ServiceAccount (v1) has changed:
...
      app.kubernetes.io/instance: cert-manager
      app.kubernetes.io/component: "controller"
-     app.kubernetes.io/version: "v1.21.1"
+     app.kubernetes.io/version: "v1.21.2"
      app.kubernetes.io/managed-by: Helm
-     helm.sh/chart: cert-manager-v1.21.1
+     helm.sh/chart: cert-manager-v1.21.2
cert-manager, cert-manager-cainjector, ClusterRole (rbac.authorization.k8s.io) has changed:
...
      app.kubernetes.io/instance: cert-manager
      app.kubernetes.io/component: "cainjector"
-     app.kubernetes.io/version: "v1.21.1"
+     app.kubernetes.io/version: "v1.21.2"
      app.kubernetes.io/managed-by: Helm
-     helm.sh/chart: cert-manager-v1.21.1
+     helm.sh/chart: cert-manager-v1.21.2
  rules:
    - apiGroups: ["cert-manager.io"]
...
cert-manager, cert-manager-cainjector, ClusterRoleBinding (rbac.authorization.k8s.io) has changed:
...
      app.kubernetes.io/instance: cert-manager
      app.kubernetes.io/component: "cainjector"
-     app.kubernetes.io/version: "v1.21.1"
+     app.kubernetes.io/version: "v1.21.2"
      app.kubernetes.io/managed-by: Helm
-     helm.sh/chart: cert-manager-v1.21.1
+     helm.sh/chart: cert-manager-v1.21.2
  roleRef:
    apiGroup: rbac.authorization.k8s.io
...
cert-manager, cert-manager-cainjector, Deployment (apps) has changed:
...
      app.kubernetes.io/instance: cert-manager
      app.kubernetes.io/component: "cainjector"
-     app.kubernetes.io/version: "v1.21.1"
+     app.kubernetes.io/version: "v1.21.2"
      app.kubernetes.io/managed-by: Helm
-     helm.sh/chart: cert-manager-v1.21.1
+     helm.sh/chart: cert-manager-v1.21.2
  spec:
    replicas: 1
...
          app.kubernetes.io/instance: cert-manager
          app.kubernetes.io/component: "cainjector"
-         app.kubernetes.io/version: "v1.21.1"
+         app.kubernetes.io/version: "v1.21.2"
          app.kubernetes.io/managed-by: Helm
-         helm.sh/chart: cert-manager-v1.21.1
+         helm.sh/chart: cert-manager-v1.21.2
        annotations:
          prometheus.io/path: "/metrics"
...
        containers:
          - name: cert-manager-cainjector
-           image: "quay.io/jetstack/cert-manager-cainjector:v1.21.1"
+           image: "quay.io/jetstack/cert-manager-cainjector:v1.21.2"
            imagePullPolicy: IfNotPresent
            args:
...
cert-manager, cert-manager-cainjector, Service (v1) has changed:
...
      app.kubernetes.io/instance: cert-manager
      app.kubernetes.io/component: "cainjector"
-     app.kubernetes.io/version: "v1.21.1"
+     app.kubernetes.io/version: "v1.21.2"
      app.kubernetes.io/managed-by: Helm
-     helm.sh/chart: cert-manager-v1.21.1
+     helm.sh/chart: cert-manager-v1.21.2
  spec:
    type: ClusterIP
...
cert-manager, cert-manager-cainjector, ServiceAccount (v1) has changed:
...
      app.kubernetes.io/instance: cert-manager
      app.kubernetes.io/component: "cainjector"
-     app.kubernetes.io/version: "v1.21.1"
+     app.kubernetes.io/version: "v1.21.2"
      app.kubernetes.io/managed-by: Helm
-     helm.sh/chart: cert-manager-v1.21.1
+     helm.sh/chart: cert-manager-v1.21.2
cert-manager, cert-manager-cluster-view, ClusterRole (rbac.authorization.k8s.io) has changed:
...
      app.kubernetes.io/instance: cert-manager
      app.kubernetes.io/component: "controller"
-     app.kubernetes.io/version: "v1.21.1"
+     app.kubernetes.io/version: "v1.21.2"
      app.kubernetes.io/managed-by: Helm
-     helm.sh/chart: cert-manager-v1.21.1
+     helm.sh/chart: cert-manager-v1.21.2
      rbac.authorization.k8s.io/aggregate-to-cluster-reader: "true"
  rules:
...
cert-manager, cert-manager-controller-approve:cert-manager-io, ClusterRole (rbac.authorization.k8s.io) has changed:
...
      app.kubernetes.io/instance: cert-manager
      app.kubernetes.io/component: "cert-manager"
-     app.kubernetes.io/version: "v1.21.1"
+     app.kubernetes.io/version: "v1.21.2"
      app.kubernetes.io/managed-by: Helm
-     helm.sh/chart: cert-manager-v1.21.1
+     helm.sh/chart: cert-manager-v1.21.2
  rules:
    - apiGroups: ["cert-manager.io"]
...
cert-manager, cert-manager-controller-approve:cert-manager-io, ClusterRoleBinding (rbac.authorization.k8s.io) has changed:
...
      app.kubernetes.io/instance: cert-manager
      app.kubernetes.io/component: "cert-manager"
-     app.kubernetes.io/version: "v1.21.1"
+     app.kubernetes.io/version: "v1.21.2"
      app.kubernetes.io/managed-by: Helm
-     helm.sh/chart: cert-manager-v1.21.1
+     helm.sh/chart: cert-manager-v1.21.2
  roleRef:
    apiGroup: rbac.authorization.k8s.io
...
cert-manager, cert-manager-controller-certificates, ClusterRole (rbac.authorization.k8s.io) has changed:
...
      app.kubernetes.io/instance: cert-manager
      app.kubernetes.io/component: "controller"
-     app.kubernetes.io/version: "v1.21.1"
+     app.kubernetes.io/version: "v1.21.2"
      app.kubernetes.io/managed-by: Helm
-     helm.sh/chart: cert-manager-v1.21.1
+     helm.sh/chart: cert-manager-v1.21.2
  rules:
    - apiGroups: ["cert-manager.io"]
...
cert-manager, cert-manager-controller-certificates, ClusterRoleBinding (rbac.authorization.k8s.io) has changed:
...
      app.kubernetes.io/instance: cert-manager
      app.kubernetes.io/component: "controller"
-     app.kubernetes.io/version: "v1.21.1"
+     app.kubernetes.io/version: "v1.21.2"
      app.kubernetes.io/managed-by: Helm
-     helm.sh/chart: cert-manager-v1.21.1
+     helm.sh/chart: cert-manager-v1.21.2
  roleRef:
    apiGroup: rbac.authorization.k8s.io
...
cert-manager, cert-manager-controller-certificatesigningrequests, ClusterRole (rbac.authorization.k8s.io) has changed:
...
      app.kubernetes.io/instance: cert-manager
      app.kubernetes.io/component: "cert-manager"
-     app.kubernetes.io/version: "v1.21.1"
+     app.kubernetes.io/version: "v1.21.2"
      app.kubernetes.io/managed-by: Helm
-     helm.sh/chart: cert-manager-v1.21.1
+     helm.sh/chart: cert-manager-v1.21.2
  rules:
    - apiGroups: ["certificates.k8s.io"]
...
cert-manager, cert-manager-controller-certificatesigningrequests, ClusterRoleBinding (rbac.authorization.k8s.io) has changed:
...
      app.kubernetes.io/instance: cert-manager
      app.kubernetes.io/component: "cert-manager"
-     app.kubernetes.io/version: "v1.21.1"
+     app.kubernetes.io/version: "v1.21.2"
      app.kubernetes.io/managed-by: Helm
-     helm.sh/chart: cert-manager-v1.21.1
+     helm.sh/chart: cert-manager-v1.21.2
  roleRef:
    apiGroup: rbac.authorization.k8s.io
...
cert-manager, cert-manager-controller-challenges, ClusterRole (rbac.authorization.k8s.io) has changed:
...
      app.kubernetes.io/instance: cert-manager
      app.kubernetes.io/component: "controller"
-     app.kubernetes.io/version: "v1.21.1"
+     app.kubernetes.io/version: "v1.21.2"
      app.kubernetes.io/managed-by: Helm
-     helm.sh/chart: cert-manager-v1.21.1
+     helm.sh/chart: cert-manager-v1.21.2
  rules:
    # Use to update challenge resource status
...
cert-manager, cert-manager-controller-challenges, ClusterRoleBinding (rbac.authorization.k8s.io) has changed:
...
      app.kubernetes.io/instance: cert-manager
      app.kubernetes.io/component: "controller"
-     app.kubernetes.io/version: "v1.21.1"
+     app.kubernetes.io/version: "v1.21.2"
      app.kubernetes.io/managed-by: Helm
-     helm.sh/chart: cert-manager-v1.21.1
+     helm.sh/chart: cert-manager-v1.21.2
  roleRef:
    apiGroup: rbac.authorization.k8s.io
...
cert-manager, cert-manager-controller-clusterissuers, ClusterRole (rbac.authorization.k8s.io) has changed:
...
      app.kubernetes.io/instance: cert-manager
      app.kubernetes.io/component: "controller"
-     app.kubernetes.io/version: "v1.21.1"
+     app.kubernetes.io/version: "v1.21.2"
      app.kubernetes.io/managed-by: Helm
-     helm.sh/chart: cert-manager-v1.21.1
+     helm.sh/chart: cert-manager-v1.21.2
  rules:
    - apiGroups: ["cert-manager.io"]
...
cert-manager, cert-manager-controller-clusterissuers, ClusterRoleBinding (rbac.authorization.k8s.io) has changed:
...
      app.kubernetes.io/instance: cert-manager
      app.kubernetes.io/component: "controller"
-     app.kubernetes.io/version: "v1.21.1"
+     app.kubernetes.io/version: "v1.21.2"
      app.kubernetes.io/managed-by: Helm
-     helm.sh/chart: cert-manager-v1.21.1
+     helm.sh/chart: cert-manager-v1.21.2
  roleRef:
    apiGroup: rbac.authorization.k8s.io
...
cert-manager, cert-manager-controller-ingress-shim, ClusterRole (rbac.authorization.k8s.io) has changed:
...
      app.kubernetes.io/instance: cert-manager
      app.kubernetes.io/component: "controller"
-     app.kubernetes.io/version: "v1.21.1"
+     app.kubernetes.io/version: "v1.21.2"
      app.kubernetes.io/managed-by: Helm
-     helm.sh/chart: cert-manager-v1.21.1
+     helm.sh/chart: cert-manager-v1.21.2
  rules:
    - apiGroups: ["cert-manager.io"]
...
cert-manager, cert-manager-controller-ingress-shim, ClusterRoleBinding (rbac.authorization.k8s.io) has changed:
...
      app.kubernetes.io/instance: cert-manager
      app.kubernetes.io/component: "controller"
-     app.kubernetes.io/version: "v1.21.1"
+     app.kubernetes.io/version: "v1.21.2"
      app.kubernetes.io/managed-by: Helm
-     helm.sh/chart: cert-manager-v1.21.1
+     helm.sh/chart: cert-manager-v1.21.2
  roleRef:
    apiGroup: rbac.authorization.k8s.io
...
cert-manager, cert-manager-controller-issuers, ClusterRole (rbac.authorization.k8s.io) has changed:
...
      app.kubernetes.io/instance: cert-manager
      app.kubernetes.io/component: "controller"
-     app.kubernetes.io/version: "v1.21.1"
+     app.kubernetes.io/version: "v1.21.2"
      app.kubernetes.io/managed-by: Helm
-     helm.sh/chart: cert-manager-v1.21.1
+     helm.sh/chart: cert-manager-v1.21.2
  rules:
    - apiGroups: ["cert-manager.io"]
...
cert-manager, cert-manager-controller-issuers, ClusterRoleBinding (rbac.authorization.k8s.io) has changed:
...
      app.kubernetes.io/instance: cert-manager
      app.kubernetes.io/component: "controller"
-     app.kubernetes.io/version: "v1.21.1"
+     app.kubernetes.io/version: "v1.21.2"
      app.kubernetes.io/managed-by: Helm
-     helm.sh/chart: cert-manager-v1.21.1
+     helm.sh/chart: cert-manager-v1.21.2
  roleRef:
    apiGroup: rbac.authorization.k8s.io
...
cert-manager, cert-manager-controller-orders, ClusterRole (rbac.authorization.k8s.io) has changed:
...
      app.kubernetes.io/instance: cert-manager
      app.kubernetes.io/component: "controller"
-     app.kubernetes.io/version: "v1.21.1"
+     app.kubernetes.io/version: "v1.21.2"
      app.kubernetes.io/managed-by: Helm
-     helm.sh/chart: cert-manager-v1.21.1
+     helm.sh/chart: cert-manager-v1.21.2
  rules:
    - apiGroups: ["acme.cert-manager.io"]
...
cert-manager, cert-manager-controller-orders, ClusterRoleBinding (rbac.authorization.k8s.io) has changed:
...
      app.kubernetes.io/instance: cert-manager
      app.kubernetes.io/component: "controller"
-     app.kubernetes.io/version: "v1.21.1"
+     app.kubernetes.io/version: "v1.21.2"
      app.kubernetes.io/managed-by: Helm
-     helm.sh/chart: cert-manager-v1.21.1
+     helm.sh/chart: cert-manager-v1.21.2
  roleRef:
    apiGroup: rbac.authorization.k8s.io
...
cert-manager, cert-manager-edit, ClusterRole (rbac.authorization.k8s.io) has changed:
...
      app.kubernetes.io/instance: cert-manager
      app.kubernetes.io/component: "controller"
-     app.kubernetes.io/version: "v1.21.1"
+     app.kubernetes.io/version: "v1.21.2"
      app.kubernetes.io/managed-by: Helm
-     helm.sh/chart: cert-manager-v1.21.1
+     helm.sh/chart: cert-manager-v1.21.2
      rbac.authorization.k8s.io/aggregate-to-edit: "true"
      rbac.authorization.k8s.io/aggregate-to-admin: "true"
...
cert-manager, cert-manager-startupapicheck, Job (batch) has changed:
...
      app.kubernetes.io/instance: cert-manager
      app.kubernetes.io/component: "startupapicheck"
-     app.kubernetes.io/version: "v1.21.1"
+     app.kubernetes.io/version: "v1.21.2"
      app.kubernetes.io/managed-by: Helm
-     helm.sh/chart: cert-manager-v1.21.1
+     helm.sh/chart: cert-manager-v1.21.2
    annotations:
      helm.sh/hook: post-install
...
          app.kubernetes.io/instance: cert-manager
          app.kubernetes.io/component: "startupapicheck"
-         app.kubernetes.io/version: "v1.21.1"
+         app.kubernetes.io/version: "v1.21.2"
          app.kubernetes.io/managed-by: Helm
-         helm.sh/chart: cert-manager-v1.21.1
+         helm.sh/chart: cert-manager-v1.21.2
      spec:
        restartPolicy: OnFailure
...
        containers:
          - name: cert-manager-startupapicheck
-           image: "quay.io/jetstack/cert-manager-startupapicheck:v1.21.1"
+           image: "quay.io/jetstack/cert-manager-startupapicheck:v1.21.2"
            imagePullPolicy: IfNotPresent
            args:
...
cert-manager, cert-manager-startupapicheck, ServiceAccount (v1) has changed:
...
      app.kubernetes.io/instance: cert-manager
      app.kubernetes.io/component: "startupapicheck"
-     app.kubernetes.io/version: "v1.21.1"
+     app.kubernetes.io/version: "v1.21.2"
      app.kubernetes.io/managed-by: Helm
-     helm.sh/chart: cert-manager-v1.21.1
+     helm.sh/chart: cert-manager-v1.21.2
cert-manager, cert-manager-startupapicheck:create-cert, Role (rbac.authorization.k8s.io) has changed:
...
      app.kubernetes.io/instance: cert-manager
      app.kubernetes.io/component: "startupapicheck"
-     app.kubernetes.io/version: "v1.21.1"
+     app.kubernetes.io/version: "v1.21.2"
      app.kubernetes.io/managed-by: Helm
-     helm.sh/chart: cert-manager-v1.21.1
+     helm.sh/chart: cert-manager-v1.21.2
    annotations:
      helm.sh/hook: post-install
...
cert-manager, cert-manager-startupapicheck:create-cert, RoleBinding (rbac.authorization.k8s.io) has changed:
...
      app.kubernetes.io/instance: cert-manager
      app.kubernetes.io/component: "startupapicheck"
-     app.kubernetes.io/version: "v1.21.1"
+     app.kubernetes.io/version: "v1.21.2"
      app.kubernetes.io/managed-by: Helm
-     helm.sh/chart: cert-manager-v1.21.1
+     helm.sh/chart: cert-manager-v1.21.2
    annotations:
      helm.sh/hook: post-install
...
cert-manager, cert-manager-view, ClusterRole (rbac.authorization.k8s.io) has changed:
...
      app.kubernetes.io/instance: cert-manager
      app.kubernetes.io/component: "controller"
-     app.kubernetes.io/version: "v1.21.1"
+     app.kubernetes.io/version: "v1.21.2"
      app.kubernetes.io/managed-by: Helm
-     helm.sh/chart: cert-manager-v1.21.1
+     helm.sh/chart: cert-manager-v1.21.2
      rbac.authorization.k8s.io/aggregate-to-view: "true"
      rbac.authorization.k8s.io/aggregate-to-edit: "true"
...
cert-manager, cert-manager-webhook, Deployment (apps) has changed:
...
      app.kubernetes.io/instance: cert-manager
      app.kubernetes.io/component: "webhook"
-     app.kubernetes.io/version: "v1.21.1"
+     app.kubernetes.io/version: "v1.21.2"
      app.kubernetes.io/managed-by: Helm
-     helm.sh/chart: cert-manager-v1.21.1
+     helm.sh/chart: cert-manager-v1.21.2
  spec:
    replicas: 1
...
          app.kubernetes.io/instance: cert-manager
          app.kubernetes.io/component: "webhook"
-         app.kubernetes.io/version: "v1.21.1"
+         app.kubernetes.io/version: "v1.21.2"
          app.kubernetes.io/managed-by: Helm
-         helm.sh/chart: cert-manager-v1.21.1
+         helm.sh/chart: cert-manager-v1.21.2
        annotations:
          prometheus.io/path: "/metrics"
...
        containers:
          - name: cert-manager-webhook
-           image: "quay.io/jetstack/cert-manager-webhook:v1.21.1"
+           image: "quay.io/jetstack/cert-manager-webhook:v1.21.2"
            imagePullPolicy: IfNotPresent
            args:
...
cert-manager, cert-manager-webhook, MutatingWebhookConfiguration (admissionregistration.k8s.io) has changed:
...
      app.kubernetes.io/instance: cert-manager
      app.kubernetes.io/component: "webhook"
-     app.kubernetes.io/version: "v1.21.1"
+     app.kubernetes.io/version: "v1.21.2"
      app.kubernetes.io/managed-by: Helm
-     helm.sh/chart: cert-manager-v1.21.1
+     helm.sh/chart: cert-manager-v1.21.2
    annotations:
      cert-manager.io/inject-ca-from-secret: "cert-manager/cert-manager-webhook-ca"
...
cert-manager, cert-manager-webhook, Service (v1) has changed:
...
      app.kubernetes.io/instance: cert-manager
      app.kubernetes.io/component: "webhook"
-     app.kubernetes.io/version: "v1.21.1"
+     app.kubernetes.io/version: "v1.21.2"
      app.kubernetes.io/managed-by: Helm
-     helm.sh/chart: cert-manager-v1.21.1
+     helm.sh/chart: cert-manager-v1.21.2
  spec:
    type: ClusterIP
...
cert-manager, cert-manager-webhook, ServiceAccount (v1) has changed:
...
      app.kubernetes.io/instance: cert-manager
      app.kubernetes.io/component: "webhook"
-     app.kubernetes.io/version: "v1.21.1"
+     app.kubernetes.io/version: "v1.21.2"
      app.kubernetes.io/managed-by: Helm
-     helm.sh/chart: cert-manager-v1.21.1
+     helm.sh/chart: cert-manager-v1.21.2
cert-manager, cert-manager-webhook, ValidatingWebhookConfiguration (admissionregistration.k8s.io) has changed:
...
      app.kubernetes.io/instance: cert-manager
      app.kubernetes.io/component: "webhook"
-     app.kubernetes.io/version: "v1.21.1"
+     app.kubernetes.io/version: "v1.21.2"
      app.kubernetes.io/managed-by: Helm
-     helm.sh/chart: cert-manager-v1.21.1
+     helm.sh/chart: cert-manager-v1.21.2
    annotations:
      cert-manager.io/inject-ca-from-secret: "cert-manager/cert-manager-webhook-ca"
...
cert-manager, cert-manager-webhook:dynamic-serving, Role (rbac.authorization.k8s.io) has changed:
...
      app.kubernetes.io/instance: cert-manager
      app.kubernetes.io/component: "webhook"
-     app.kubernetes.io/version: "v1.21.1"
+     app.kubernetes.io/version: "v1.21.2"
      app.kubernetes.io/managed-by: Helm
-     helm.sh/chart: cert-manager-v1.21.1
+     helm.sh/chart: cert-manager-v1.21.2
  rules:
  - apiGroups: [""]
...
cert-manager, cert-manager-webhook:dynamic-serving, RoleBinding (rbac.authorization.k8s.io) has changed:
...
      app.kubernetes.io/instance: cert-manager
      app.kubernetes.io/component: "webhook"
-     app.kubernetes.io/version: "v1.21.1"
+     app.kubernetes.io/version: "v1.21.2"
      app.kubernetes.io/managed-by: Helm
-     helm.sh/chart: cert-manager-v1.21.1
+     helm.sh/chart: cert-manager-v1.21.2
  roleRef:
    apiGroup: rbac.authorization.k8s.io
...
cert-manager, cert-manager-webhook:subjectaccessreviews, ClusterRole (rbac.authorization.k8s.io) has changed:
...
      app.kubernetes.io/instance: cert-manager
      app.kubernetes.io/component: "webhook"
-     app.kubernetes.io/version: "v1.21.1"
+     app.kubernetes.io/version: "v1.21.2"
      app.kubernetes.io/managed-by: Helm
-     helm.sh/chart: cert-manager-v1.21.1
+     helm.sh/chart: cert-manager-v1.21.2
  rules:
  - apiGroups: ["authorization.k8s.io"]
...
cert-manager, cert-manager-webhook:subjectaccessreviews, ClusterRoleBinding (rbac.authorization.k8s.io) has changed:
...
      app.kubernetes.io/instance: cert-manager
      app.kubernetes.io/component: "webhook"
-     app.kubernetes.io/version: "v1.21.1"
+     app.kubernetes.io/version: "v1.21.2"
      app.kubernetes.io/managed-by: Helm
-     helm.sh/chart: cert-manager-v1.21.1
+     helm.sh/chart: cert-manager-v1.21.2
  roleRef:
    apiGroup: rbac.authorization.k8s.io
...
cert-manager, certificaterequests.cert-manager.io, CustomResourceDefinition (apiextensions.k8s.io) has changed:
...
      app.kubernetes.io/instance: "cert-manager"
      app.kubernetes.io/component: "crds"
-     app.kubernetes.io/version: "v1.21.1"
+     app.kubernetes.io/version: "v1.21.2"
      app.kubernetes.io/managed-by: Helm
-     helm.sh/chart: cert-manager-v1.21.1
+     helm.sh/chart: cert-manager-v1.21.2
  spec:
    group: cert-manager.io
...
cert-manager, certificates.cert-manager.io, CustomResourceDefinition (apiextensions.k8s.io) has changed:
...
      app.kubernetes.io/instance: "cert-manager"
      app.kubernetes.io/component: "crds"
-     app.kubernetes.io/version: "v1.21.1"
+     app.kubernetes.io/version: "v1.21.2"
      app.kubernetes.io/managed-by: Helm
-     helm.sh/chart: cert-manager-v1.21.1
+     helm.sh/chart: cert-manager-v1.21.2
  spec:
    group: cert-manager.io
...
cert-manager, challenges.acme.cert-manager.io, CustomResourceDefinition (apiextensions.k8s.io) has changed:
...
      app.kubernetes.io/instance: "cert-manager"
      app.kubernetes.io/component: "crds"
-     app.kubernetes.io/version: "v1.21.1"
+     app.kubernetes.io/version: "v1.21.2"
      app.kubernetes.io/managed-by: Helm
-     helm.sh/chart: cert-manager-v1.21.1
+     helm.sh/chart: cert-manager-v1.21.2
  spec:
    group: acme.cert-manager.io
...
cert-manager, clusterissuers.cert-manager.io, CustomResourceDefinition (apiextensions.k8s.io) has changed:
...
      app.kubernetes.io/instance: "cert-manager"
      app.kubernetes.io/component: "crds"
-     app.kubernetes.io/version: "v1.21.1"
+     app.kubernetes.io/version: "v1.21.2"
      app.kubernetes.io/managed-by: Helm
-     helm.sh/chart: cert-manager-v1.21.1
+     helm.sh/chart: cert-manager-v1.21.2
  spec:
    group: cert-manager.io
...
cert-manager, issuers.cert-manager.io, CustomResourceDefinition (apiextensions.k8s.io) has changed:
...
      app.kubernetes.io/instance: "cert-manager"
      app.kubernetes.io/component: "crds"
-     app.kubernetes.io/version: "v1.21.1"
+     app.kubernetes.io/version: "v1.21.2"
      app.kubernetes.io/managed-by: Helm
-     helm.sh/chart: cert-manager-v1.21.1
+     helm.sh/chart: cert-manager-v1.21.2
  spec:
    group: cert-manager.io
...
cert-manager, orders.acme.cert-manager.io, CustomResourceDefinition (apiextensions.k8s.io) has changed:
...
      app.kubernetes.io/instance: "cert-manager"
      app.kubernetes.io/component: "crds"
-     app.kubernetes.io/version: "v1.21.1"
+     app.kubernetes.io/version: "v1.21.2"
      app.kubernetes.io/managed-by: Helm
-     helm.sh/chart: cert-manager-v1.21.1
+     helm.sh/chart: cert-manager-v1.21.2
  spec:
    group: acme.cert-manager.io
...
kube-system, cert-manager-cainjector:leaderelection, Role (rbac.authorization.k8s.io) has changed:
...
      app.kubernetes.io/instance: cert-manager
      app.kubernetes.io/component: "cainjector"
-     app.kubernetes.io/version: "v1.21.1"
+     app.kubernetes.io/version: "v1.21.2"
      app.kubernetes.io/managed-by: Helm
-     helm.sh/chart: cert-manager-v1.21.1
+     helm.sh/chart: cert-manager-v1.21.2
  rules:
    # Used for leader election by the controller
...
kube-system, cert-manager-cainjector:leaderelection, RoleBinding (rbac.authorization.k8s.io) has changed:
...
      app.kubernetes.io/instance: cert-manager
      app.kubernetes.io/component: "cainjector"
-     app.kubernetes.io/version: "v1.21.1"
+     app.kubernetes.io/version: "v1.21.2"
      app.kubernetes.io/managed-by: Helm
-     helm.sh/chart: cert-manager-v1.21.1
+     helm.sh/chart: cert-manager-v1.21.2
  roleRef:
    apiGroup: rbac.authorization.k8s.io
...
kube-system, cert-manager:leaderelection, Role (rbac.authorization.k8s.io) has changed:
...
      app.kubernetes.io/instance: cert-manager
      app.kubernetes.io/component: "controller"
-     app.kubernetes.io/version: "v1.21.1"
+     app.kubernetes.io/version: "v1.21.2"
      app.kubernetes.io/managed-by: Helm
-     helm.sh/chart: cert-manager-v1.21.1
+     helm.sh/chart: cert-manager-v1.21.2
  rules:
    - apiGroups: ["coordination.k8s.io"]
...
kube-system, cert-manager:leaderelection, RoleBinding (rbac.authorization.k8s.io) has changed:
...
      app.kubernetes.io/instance: cert-manager
      app.kubernetes.io/component: "controller"
-     app.kubernetes.io/version: "v1.21.1"
+     app.kubernetes.io/version: "v1.21.2"
      app.kubernetes.io/managed-by: Helm
-     helm.sh/chart: cert-manager-v1.21.1
+     helm.sh/chart: cert-manager-v1.21.2
  roleRef:
    apiGroup: rbac.authorization.k8s.io
...

Comparing release=aws-cloudwatch-agent, chart=charts/aws-cloudwatch, namespace=amazon-cloudwatch
Comparing release=target-group-crds, chart=charts/targetgroup-crds, namespace=
Comparing release=aws-lb-controller, chart=eks/aws-load-balancer-controller, namespace=kube-system
Comparing release=storage-class, chart=charts/storage-class, namespace=kube-system
Comparing release=metrics-server, chart=metrics-server/metrics-server, namespace=kube-system
Comparing release=nidhogg, chart=/home/runner/.cache/helmfile/oci__ghcr_io/pelotech/charts/nidhogg/0.6.6/nidhogg, namespace=kube-system
Comparing release=velero, chart=vmware-tanzu/velero, namespace=velero
Comparing release=volume-snapshot-crds, chart=charts/volume-snapshot-crds, namespace=
Comparing release=volume-snapshot-class, chart=charts/volume-snapshot-class, namespace=
Comparing release=snapshot-controller, chart=charts/snapshot-controller, namespace=kube-system
Comparing release=falco, chart=falco/falco, namespace=falco
Comparing release=falco-secret, chart=charts/notify-secrets, namespace=falco
Comparing release=vpa, chart=fairwinds-stable/vpa, namespace=kube-system
Comparing release=goldilocks, chart=fairwinds-stable/goldilocks, namespace=goldilocks
Comparing release=signoz, chart=signoz/signoz, namespace=signoz
Comparing release=signoz-secret, chart=charts/notify-secrets, namespace=signoz
Comparing release=opentelemetry-operator, chart=opentelemetry/opentelemetry-operator, namespace=signoz
Comparing release=signoz-k8s, chart=signoz/k8s-infra, namespace=signoz
signoz, signoz-k8s-k8s-infra-otel-agent, ConfigMap (v1) has changed:
...
    namespace: signoz
    labels:
-     helm.sh/chart: k8s-infra-0.17.0
+     helm.sh/chart: k8s-infra-0.17.1
      app.kubernetes.io/version: "0.139.0"
      app.kubernetes.io/managed-by: Helm
...
signoz, signoz-k8s-k8s-infra-otel-agent, DaemonSet (apps) has changed:
...
    namespace: signoz
    labels:
-     helm.sh/chart: k8s-infra-0.17.0
+     helm.sh/chart: k8s-infra-0.17.1
      app.kubernetes.io/version: "0.139.0"
      app.kubernetes.io/managed-by: Helm
...
      metadata:
        annotations:
-         checksum/config: 74437ba138b8127953f853a59df5e10f9f37b65515c858ec83f96d201eda9552
+         checksum/config: eced81d9ce411bcc5897fcefef476b111069373330566ceae0c0b43118079cd5
        labels:
          app.kubernetes.io/name: k8s-infra
...
signoz, signoz-k8s-k8s-infra-otel-agent, Service (v1) has changed:
...
    namespace: signoz
    labels:
-     helm.sh/chart: k8s-infra-0.17.0
+     helm.sh/chart: k8s-infra-0.17.1
      app.kubernetes.io/version: "0.139.0"
      app.kubernetes.io/managed-by: Helm
...
signoz, signoz-k8s-k8s-infra-otel-agent, ServiceAccount (v1) has changed:
...
    namespace: signoz
    labels:
-     helm.sh/chart: k8s-infra-0.17.0
+     helm.sh/chart: k8s-infra-0.17.1
      app.kubernetes.io/version: "0.139.0"
      app.kubernetes.io/managed-by: Helm
...
signoz, signoz-k8s-k8s-infra-otel-agent-signoz, ClusterRole (rbac.authorization.k8s.io) has changed:
...
      - nodes
      - persistentvolumeclaims
+     - persistentvolumes
      verbs:
      - get
...
signoz, signoz-k8s-k8s-infra-otel-deployment, ConfigMap (v1) has changed:
...
    namespace: signoz
    labels:
-     helm.sh/chart: k8s-infra-0.17.0
+     helm.sh/chart: k8s-infra-0.17.1
      app.kubernetes.io/version: "0.139.0"
      app.kubernetes.io/managed-by: Helm
...
signoz, signoz-k8s-k8s-infra-otel-deployment, Deployment (apps) has changed:
...
    namespace: signoz
    labels:
-     helm.sh/chart: k8s-infra-0.17.0
+     helm.sh/chart: k8s-infra-0.17.1
      app.kubernetes.io/version: "0.139.0"
      app.kubernetes.io/managed-by: Helm
...
      metadata:
        annotations:
-         checksum/config: b1c98572c3744762789c7fcf9eb464305a34c416a64649f62e4ab191781b5021
+         checksum/config: 517e53102e247a396e4c83dceeb1de813af459b65f6148e2231cb20b1115cf87
        labels:
          app.kubernetes.io/name: k8s-infra
...
signoz, signoz-k8s-k8s-infra-otel-deployment, Service (v1) has changed:
...
    namespace: signoz
    labels:
-     helm.sh/chart: k8s-infra-0.17.0
+     helm.sh/chart: k8s-infra-0.17.1
      app.kubernetes.io/version: "0.139.0"
      app.kubernetes.io/managed-by: Helm
...
signoz, signoz-k8s-k8s-infra-otel-deployment, ServiceAccount (v1) has changed:
...
    namespace: signoz
    labels:
-     helm.sh/chart: k8s-infra-0.17.0
+     helm.sh/chart: k8s-infra-0.17.1
      app.kubernetes.io/version: "0.139.0"
      app.kubernetes.io/managed-by: Helm
...

Comparing release=signoz-telemetry, chart=charts/signoz-telemetry, namespace=signoz
Comparing release=signoz-importer, chart=charts/signoz-importer, namespace=signoz
Comparing release=prometheus-cloudwatch-exporter, chart=/home/runner/.cache/helmfile/oci__ghcr_io/prometheus-community/charts/prometheus-cloudwatch-exporter/0.28.1/prometheus-cloudwatch-exporter, namespace=signoz

renovate Bot added Dependencies Renovate labels Sep 5, 2026

renovate Bot requested review from P0NDER0SA, ben851 and jimleroyer as code owners September 5, 2026 06:59

renovate Bot force-pushed the renovate/all-patch branch 16 times, most recently from bf550fc to cab4dbd Compare September 10, 2026 17:15

renovate Bot changed the title ~~chore(deps): update helm release secrets-store-csi-driver-provider-aws to v3.1.3~~ chore(deps): update all patch dependencies Sep 10, 2026

renovate Bot force-pushed the renovate/all-patch branch 7 times, most recently from 9b0e9c3 to 05e7095 Compare September 11, 2026 16:28

renovate Bot force-pushed the renovate/all-patch branch 28 times, most recently from a38a8f6 to ca662a7 Compare September 22, 2026 18:36

renovate Bot force-pushed the renovate/all-patch branch from ca662a7 to 550ddc6 Compare September 22, 2026 19:15

chore(deps): update all patch dependencies

3b818f0

Navigation Menu

Repository navigation

chore(deps): update all patch dependencies - #5176

chore(deps): update all patch dependencies#5176
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/all-patch

renovate Bot commented Sep 5, 2026 •

edited

Loading

Uh oh!

github-actions Bot commented Sep 5, 2026 •

edited

Loading

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

renovate Bot commented Sep 5, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Review

Release Notes

v1.21.2

Changes by Kind

Bug or Regression

Other (Cleanup or Flake)

v0.58.3

Changed

v0.58.2

Changed

v0.17.1

What's Changed

v3.1.4

What's Changed

New Contributors

v3.1.3

What's Changed

New Contributors

v2.9.1

Configuration

Uh oh!

github-actions Bot commented Sep 5, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

STAGING HELMFILE DIFF:

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

renovate Bot commented Sep 5, 2026 •

edited

Loading

`v1.21.2`

`v0.58.3`

`v0.58.2`

`v0.17.1`

`v3.1.4`

`v3.1.3`

`v2.9.1`

github-actions Bot commented Sep 5, 2026 •

edited

Loading