chore(deps): update all non-major dependencies

[renovate]

This PR contains the following updates:

Package	Type	Update	Change	Age	Adoption	Passing	Confidence
alpine	final	minor	3.22 -> 3.23
alpine	stage	digest	4b7ce07 -> 51183f2
alpine	final	digest	4b7ce07 -> 51183f2
cert-manager (source)		patch	v1.19.1 -> v1.19.2
debian	final	digest	530a334 -> 5fc1d68
envoyproxy/envoy		patch	v1.36.2 -> v1.36.4
golang	final	digest	20b91ed -> a22b2e6
golang	stage	digest	20b91ed -> a22b2e6
golangci/golangci-lint		minor	2.6.2 -> 2.7.2
kube-prometheus-stack (source)		minor	79.11.0 -> 79.12.0
maven	stage	digest	c7fb766 -> d6055d8
io.confluent:kafka-avro-serializer (source)	compile	patch	8.1.0 -> 8.1.1
io.confluent:kafka-schema-registry-client (source)	compile	patch	8.1.0 -> 8.1.1

---

Release Notes

cert-manager/cert-manager (cert-manager)

v1.19.2

Compare Source

golangci/golangci-lint (golangci/golangci-lint)

v2.7.2

Compare Source

Released on 2025-12-07

1. Linter bug fixes
   • gosec: from 2.22.10 to daccba6

v2.7.1

Compare Source

Released on 2025-12-04

1. Linter bug fixes
   • modernize: disable stringscut analyzer

v2.7.0

Compare Source

1. Bug fixes
   • fix: clone args used by custom command
2. Linters new features or changes
   • no-sprintf-host-port: from 0.2.0 to 0.3.1 (ignore string literals without a colon)
   • unqueryvet: from 1.2.1 to 1.3.0 (handles const and var declarations)
   • revive: from 1.12.0 to 1.13.0 (new option: enable-default-rules, new rules: forbidden-call-in-wg-go, unnecessary-if, inefficient-map-lookup)
   • modernize: from 0.38.0 to 0.39.0 (new analyzers: plusbuild, stringscut)
3. Linters bug fixes
   • perfsprint: from 0.10.0 to 0.10.1
   • wrapcheck: from 2.11.0 to 2.12.0
   • godoc-lint: from 0.10.1 to 0.10.2
4. Misc.
   • Add some flags to the custom command
5. Documentation
   • docs: split changelog v1 and v2

prometheus-community/helm-charts (kube-prometheus-stack)

v79.12.0

Compare Source

kube-prometheus-stack collects Kubernetes manifests, Grafana dashboards, and Prometheus rules combined with documentation and scripts to provide easy to operate end-to-end Kubernetes cluster monitoring with Prometheus using the Prometheus Operator.

What's Changed

• [kube-prometheus-stack] Update https://github.com/etcd-io/etcd digest to cf5a571 by @​renovate[bot] in #​6381

Full Changelog: prometheus-community/helm-charts@prometheus-snmp-exporter-9.9.0...kube-prometheus-stack-79.12.0

confluentinc/schema-registry (io.confluent:kafka-avro-serializer)

v8.1.1

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.