chore(deps): update all non-major dependencies (main)

[renovate]

This PR contains the following updates:

Package	Type	Update	Change	Age	Adoption	Passing	Confidence
debian	final	digest	a99cfc5 → a29215f
envoyproxy/envoy		patch	v1.39.1 → v1.39.2
ghcr.io/adobe/koperator/kafka		patch	2.13-3.9.2-jdk21.0.11 → 2.13-3.9.2-jdk21.0.12
golang (source)	final	digest	e0174e5 → 162be52
golang (source)	stage	minor	1.25-alpine → 1.27-alpine
golang (source)	stage	digest	e0174e5 → 162be52
helm/kind-action	action	patch	v1.15.0 → v1.15.1
kube-prometheus-stack (source)		minor	91.8.2 → 91.9.0
maven (source)	stage	minor	3.9-eclipse-temurin-21-alpine → 3.10-eclipse-temurin-21-alpine
maven (source)	stage	digest	efdf660 → 9b868ff
prometheus/jmx_exporter		minor	1.6.0 → 1.7.0
sigs.k8s.io/cloud-provider-kind		minor	v0.11.1 → v0.12.0

---

Release Notes

helm/kind-action (helm/kind-action)

v1.15.1

Compare Source

What's Changed

• feat: add version_file input to read the kind version from a file by @​somaz94 in #​162
• chore: bump kubectl to v1.37.1 and cloud-provider-kind to v0.12.0 by @​cpanato in #​170

New Contributors

• @​somaz94 made their first contribution in #​162

Full Changelog: helm/kind-action@v1.15.0...v1.15.1

prometheus-community/helm-charts (kube-prometheus-stack)

v91.9.0

Compare Source

kube-prometheus-stack collects Kubernetes manifests, Grafana dashboards, and Prometheus rules combined with documentation and scripts to provide easy to operate end-to-end Kubernetes cluster monitoring with Prometheus using the Prometheus Operator.

What's Changed

• [CI] Update dependency helm-unittest/helm-unittest to v1.2.0 by @​renovate[bot] in #​7341
• [kube-prometheus-stack] Update kube-prometheus-stack dependency non-major updates by @​renovate[bot] in #​7342

Full Changelog: prometheus-community/helm-charts@prometheus-redis-exporter-6.33.0...kube-prometheus-stack-91.9.0

prometheus/jmx_exporter (prometheus/jmx_exporter)

v1.7.0: / 2026-10-05

Compare Source

JMX Exporter 1.7.0

Features

• SSL PEM support: The exporter HTTP server can now use PEM-encoded certificate/private key files instead of a Java keystore. Both httpServer.ssl.pem.certificate.filename and httpServer.ssl.pem.privateKey.filename are supported, including encrypted private keys (with an optional password that supports ${ENV_VAR} resolution) and unencrypted/encrypted PKCS8, traditional RSA, and traditional EC key formats. PEM mode is mutually exclusive with httpServer.ssl.keyStore, and certificate material continues to be reloaded hourly.
• Configurable Java agent logging backend: The Java agent (and isolator agent) can now use a JUL-independent logging backend that writes INFO, WARN, and ERROR messages to standard error. Select it with -Djmx.prometheus.exporter.logging.backend=native or the JMX_PROMETHEUS_EXPORTER_LOGGING_BACKEND=native environment variable. Supported values are native and jul (the default), and the system property takes precedence over the environment variable.
• Performance optimizations: Collector scraping, rule matching/caching, configuration loading, credential caching, and map/string handling were tuned, and JMH benchmark modules and helper scripts were added (collector-benchmarks, jmx_prometheus_common-benchmarks, jmx_prometheus_javaagent-benchmarks) to track them.
• Reference material: The website documentation was restructured and a 1.7.0 versioned documentation set was added.

Fixed

• The JVM no longer hangs on exit when httpServer.ssl is configured; the shared scheduled executor used for the hourly SSL certificate reload (and for maximumRequestSeconds) now uses daemon threads like the rest of the project.
• Fixed credential caching: valid credentials are now looked up in the cache before the potentially expensive password verification, and invalid credentials are never cached.
• Fixed configuration precedence.
• Fixed security edge cases in the HTTP server.
• Fixed a NullPointerException when an MBean reports an attribute that is not present in its MBeanInfo (the attribute is now skipped).
• Fixed jar shading for the Java agent and isolator java agent.
• The isolator class loader no longer fails on JDK 8 when a package is already defined by an ancestor classloader.
• Reverted Caffeine to a version that maintains Java 8 compatibility.
• Fixed Javadoc.
• Fixed release.sh to correctly omit the v prefix from the release tag.
• Fixed the developer test scripts.
• Fixed integration test golden files to ignore the release version.

Changes

• Removed the Bouncy Castle library dependency.
• Implemented a BOM and reworked the build/release tooling (artifact packaging and SBOM handling).
• Added JMH benchmark modules for the collector, shared support, and Java agent.
• Refactored the integration test suite and added integration test framework helpers.
• Added and updated Docker test images.
• Decreased integration test output and improved test coverage.
• Updated documentation and added 1.7.0 versioned documentation.
• Multiple dependency updates.

New Contributors

• @​BZValoche made their first contribution in #​1529
• @​arnab_nandy7 made their first contribution in #​1528
• @​Abaidullah889 made their first contribution in #​1601

Full Changelog

kubernetes-sigs/cloud-provider-kind (sigs.k8s.io/cloud-provider-kind)

v0.12.0

Compare Source

What's Changed

• Reject HTTPRoute rules with unknown filters by @​bittrance in #​440
• Conform to Gateway API v1.6.1 by @​bittrance in #​447
• Populate GatewayClass supportedFeatures [GEP-2162] by @​bittrance in #​448
• Only program Envoy if Gateway is Accepted=True by @​bittrance in #​451
• fix: reflect static spec.addresses in Gateway status and enable the corresponding conformance tests by @​snorwin in #​453
• gateway: implement GEP-1494 ExternalAuth HTTPRoute filter by @​aojea in #​456
• Respect HTTPRoute parent statuses for other controllers by @​bittrance in #​471
• loadbalancer: allow overriding the Envoy templates by @​aojea in #​477
• feat: add --enable-lb-tunnel option for linux by @​sshambar in #​466
• loadbalancer, gateway: publish single-stack ports on an ephemeral host port by @​ddalton in #​481
• loadbalancer: set stop-signal to SIGKILL for faster container stop by @​sshambar in #​484
• loadbalancer: recreate the container when the Service gains ports by @​ddalton in #​483
• gateway: recreate the container when the Gateway gains ports by @​aojea in #​486

New Contributors

• @​bittrance made their first contribution in #​440
• @​snorwin made their first contribution in #​453
• @​golamrabbiazad made their first contribution in #​465
• @​sshambar made their first contribution in #​466
• @​ddalton made their first contribution in #​481

Full Changelog: kubernetes-sigs/cloud-provider-kind@v0.11.1...v0.12.0

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.