Bump apko to 0.30.31

.github/workflows/mega-module.yaml

@@ -103,7 +103,7 @@ jobs:
       working-directory: images
       env:
         TF_VAR_target_repository: localhost:5005/tf-apko
-        APKO_IMAGE: ghcr.io/wolfi-dev/apko:latest@sha256:683f59107e0ec1ecf301e4da2306889f1f378e5f6eda61b8042928267a5e5ddb
+        APKO_IMAGE: ghcr.io/wolfi-dev/apko:latest@sha256:b7e04001956c0ab24ec1650402a6ff9bb065788cf6259c166e82ed0ee48a0057
       run: |
         # Now change to our custom apko provider, note it may have a
         # digest drift w.r.t. imagetest sandbox digests, but the above

docs/data-sources/config.md

@@ -42,6 +42,7 @@ Optional:
 - `accounts` (Object) (see [below for nested schema](#nestedobjatt--configs--config--accounts))
 - `annotations` (Map of String)
 - `archs` (List of String)
+- `certificates` (Object) (see [below for nested schema](#nestedobjatt--configs--config--certificates))
 - `cmd` (String)
 - `contents` (Object) (see [below for nested schema](#nestedobjatt--configs--config--contents))
 - `entrypoint` (Object) (see [below for nested schema](#nestedobjatt--configs--config--entrypoint))
@@ -86,6 +87,23 @@ Optional:
 
 
 
+<a id="nestedobjatt--configs--config--certificates"></a>
+### Nested Schema for `configs.config.certificates`
+
+Optional:
+
+- `additional` (List of Object) (see [below for nested schema](#nestedobjatt--configs--config--certificates--additional))
+
+<a id="nestedobjatt--configs--config--certificates--additional"></a>
+### Nested Schema for `configs.config.certificates.additional`
+
+Optional:
+
+- `content` (String)
+- `name` (String)
+
+
+
 <a id="nestedobjatt--configs--config--contents"></a>
 ### Nested Schema for `configs.config.contents`
 
@@ -142,6 +160,7 @@ Read-Only:
 - `accounts` (Object) (see [below for nested schema](#nestedobjatt--config--accounts))
 - `annotations` (Map of String)
 - `archs` (List of String)
+- `certificates` (Object) (see [below for nested schema](#nestedobjatt--config--certificates))
 - `cmd` (String)
 - `contents` (Object) (see [below for nested schema](#nestedobjatt--config--contents))
 - `entrypoint` (Object) (see [below for nested schema](#nestedobjatt--config--entrypoint))
@@ -186,6 +205,23 @@ Read-Only:
 
 
 
+<a id="nestedobjatt--config--certificates"></a>
+### Nested Schema for `config.certificates`
+
+Read-Only:
+
+- `additional` (List of Object) (see [below for nested schema](#nestedobjatt--config--certificates--additional))
+
+<a id="nestedobjatt--config--certificates--additional"></a>
+### Nested Schema for `config.certificates.additional`
+
+Read-Only:
+
+- `content` (String)
+- `name` (String)
+
+
+
 <a id="nestedobjatt--config--contents"></a>
 ### Nested Schema for `config.contents`
 

docs/data-sources/tags.md

@@ -33,6 +33,7 @@ Required:
 - `accounts` (Object) (see [below for nested schema](#nestedobjatt--config--accounts))
 - `annotations` (Map of String)
 - `archs` (List of String)
+- `certificates` (Object) (see [below for nested schema](#nestedobjatt--config--certificates))
 - `cmd` (String)
 - `contents` (Object) (see [below for nested schema](#nestedobjatt--config--contents))
 - `entrypoint` (Object) (see [below for nested schema](#nestedobjatt--config--entrypoint))
@@ -77,6 +78,23 @@ Required:
 
 
 
+<a id="nestedobjatt--config--certificates"></a>
+### Nested Schema for `config.certificates`
+
+Required:
+
+- `additional` (List of Object) (see [below for nested schema](#nestedobjatt--config--certificates--additional))
+
+<a id="nestedobjatt--config--certificates--additional"></a>
+### Nested Schema for `config.certificates.additional`
+
+Required:
+
+- `content` (String)
+- `name` (String)
+
+
+
 <a id="nestedobjatt--config--contents"></a>
 ### Nested Schema for `config.contents`
 

docs/resources/build.md

@@ -76,6 +76,7 @@ Required:
 - `accounts` (Object) (see [below for nested schema](#nestedobjatt--config--accounts))
 - `annotations` (Map of String)
 - `archs` (List of String)
+- `certificates` (Object) (see [below for nested schema](#nestedobjatt--config--certificates))
 - `cmd` (String)
 - `contents` (Object) (see [below for nested schema](#nestedobjatt--config--contents))
 - `entrypoint` (Object) (see [below for nested schema](#nestedobjatt--config--entrypoint))
@@ -120,6 +121,23 @@ Required:
 
 
 
+<a id="nestedobjatt--config--certificates"></a>
+### Nested Schema for `config.certificates`
+
+Required:
+
+- `additional` (List of Object) (see [below for nested schema](#nestedobjatt--config--certificates--additional))
+
+<a id="nestedobjatt--config--certificates--additional"></a>
+### Nested Schema for `config.certificates.additional`
+
+Required:
+
+- `content` (String)
+- `name` (String)
+
+
+
 <a id="nestedobjatt--config--contents"></a>
 ### Nested Schema for `config.contents`
 
@@ -182,6 +200,7 @@ Optional:
 - `accounts` (Object) (see [below for nested schema](#nestedobjatt--configs--config--accounts))
 - `annotations` (Map of String)
 - `archs` (List of String)
+- `certificates` (Object) (see [below for nested schema](#nestedobjatt--configs--config--certificates))
 - `cmd` (String)
 - `contents` (Object) (see [below for nested schema](#nestedobjatt--configs--config--contents))
 - `entrypoint` (Object) (see [below for nested schema](#nestedobjatt--configs--config--entrypoint))
@@ -226,6 +245,23 @@ Optional:
 
 
 
+<a id="nestedobjatt--configs--config--certificates"></a>
+### Nested Schema for `configs.config.certificates`
+
+Optional:
+
+- `additional` (List of Object) (see [below for nested schema](#nestedobjatt--configs--config--certificates--additional))
+
+<a id="nestedobjatt--configs--config--certificates--additional"></a>
+### Nested Schema for `configs.config.certificates.additional`
+
+Optional:
+
+- `content` (String)
+- `name` (String)
+
+
+
 <a id="nestedobjatt--configs--config--contents"></a>
 ### Nested Schema for `configs.config.contents`
 

go.mod

@@ -3,7 +3,7 @@ module github.com/chainguard-dev/terraform-provider-apko
 go 1.24.6
 
 require (
-	chainguard.dev/apko v0.30.29
+	chainguard.dev/apko v0.30.31
 	github.com/chainguard-dev/clog v1.8.0
 	github.com/chainguard-dev/terraform-provider-oci v0.0.25
 	github.com/google/go-cmp v0.7.0
@@ -21,7 +21,7 @@ require (
 
 require (
 	chainguard.dev/go-grpc-kit v0.17.15 // indirect
-	chainguard.dev/sdk v0.1.44 // indirect
+	chainguard.dev/sdk v0.1.45 // indirect
 	cloud.google.com/go/auth v0.17.0 // indirect
 	cloud.google.com/go/auth/oauth2adapt v0.2.8 // indirect
 	cloud.google.com/go/compute/metadata v0.9.0 // indirect
@@ -145,17 +145,17 @@ require (
 	go.opentelemetry.io/auto/sdk v1.2.1 // indirect
 	go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.63.0 // indirect
 	go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.63.0 // indirect
-	go.opentelemetry.io/otel v1.38.0 // indirect
-	go.opentelemetry.io/otel/metric v1.38.0 // indirect
-	go.opentelemetry.io/otel/trace v1.38.0 // indirect
+	go.opentelemetry.io/otel v1.39.0 // indirect
+	go.opentelemetry.io/otel/metric v1.39.0 // indirect
+	go.opentelemetry.io/otel/trace v1.39.0 // indirect
 	go.step.sm/crypto v0.75.0 // indirect
 	go.yaml.in/yaml/v2 v2.4.2 // indirect
 	golang.org/x/crypto v0.45.0 // indirect
 	golang.org/x/exp v0.0.0-20250718183923-645b1fa84792 // indirect
 	golang.org/x/mod v0.30.0 // indirect
 	golang.org/x/net v0.47.0 // indirect
-	golang.org/x/oauth2 v0.33.0 // indirect
-	golang.org/x/sys v0.38.0 // indirect
+	golang.org/x/oauth2 v0.34.0 // indirect
+	golang.org/x/sys v0.39.0 // indirect
 	golang.org/x/text v0.31.0 // indirect
 	golang.org/x/time v0.14.0 // indirect
 	golang.org/x/tools v0.39.0 // indirect

go.sum

@@ -1,9 +1,9 @@
-chainguard.dev/apko v0.30.29 h1:/uQYBoLsq92KSuKWTLj9s/5Cs5a/b57zLNz1MUWja8s=
-chainguard.dev/apko v0.30.29/go.mod h1:4FN9ULTi71cdylQx9XACNsZANRzroDOjY2yXSLdDT6Q=
+chainguard.dev/apko v0.30.31 h1:7wWsCxdwLOEf4oOrKX7VkGmoibfvVaf3FhIDLoWjXVA=
+chainguard.dev/apko v0.30.31/go.mod h1:d9NfhhEs/0YTTXaasfeLsLiHGBIO5JPF7xTFl7sQtrQ=
 chainguard.dev/go-grpc-kit v0.17.15 h1:y+FBjta2lsC0XxlkG+W5P1VxYl0zG74GRvoYN2o+p7s=
 chainguard.dev/go-grpc-kit v0.17.15/go.mod h1:1wAVAX2CCamtFlfMs9PFzfgQQxX1/TQyF6cbWApbJ2U=
-chainguard.dev/sdk v0.1.44 h1:N65xDKBSgZ/y8M8F/BZUv2sjMHxDKTPV5RieTg6mqew=
-chainguard.dev/sdk v0.1.44/go.mod h1:sOIIIsNAfdlDdm+it6viMvVsgXHOVwJ8tDi4CKpbjnI=
+chainguard.dev/sdk v0.1.45 h1:s8lqcoqwq+9nfZXYvPd3h9sDzwhQ0cjXLWUCFRTSJ20=
+chainguard.dev/sdk v0.1.45/go.mod h1:Xq7KQhJHsWAovd8AiWBAj/ftcNkxMPx5YoQeGVTIj2c=
 cloud.google.com/go/auth v0.17.0 h1:74yCm7hCj2rUyyAocqnFzsAYXgJhrG26XCFimrc/Kz4=
 cloud.google.com/go/auth v0.17.0/go.mod h1:6wv/t5/6rOPAX4fJiRjKkJCvswLwdet7G8+UGXt7nCQ=
 cloud.google.com/go/auth/oauth2adapt v0.2.8 h1:keo8NaayQZ6wimpNSmW5OPc283g65QNIiLpZnkHRbnc=
@@ -352,20 +352,20 @@ go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.6
 go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.63.0/go.mod h1:fvPi2qXDqFs8M4B4fmJhE92TyQs9Ydjlg3RvfUp+NbQ=
 go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.63.0 h1:RbKq8BG0FI8OiXhBfcRtqqHcZcka+gU3cskNuf05R18=
 go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.63.0/go.mod h1:h06DGIukJOevXaj/xrNjhi/2098RZzcLTbc0jDAUbsg=
-go.opentelemetry.io/otel v1.38.0 h1:RkfdswUDRimDg0m2Az18RKOsnI8UDzppJAtj01/Ymk8=
-go.opentelemetry.io/otel v1.38.0/go.mod h1:zcmtmQ1+YmQM9wrNsTGV/q/uyusom3P8RxwExxkZhjM=
+go.opentelemetry.io/otel v1.39.0 h1:8yPrr/S0ND9QEfTfdP9V+SiwT4E0G7Y5MO7p85nis48=
+go.opentelemetry.io/otel v1.39.0/go.mod h1:kLlFTywNWrFyEdH0oj2xK0bFYZtHRYUdv1NklR/tgc8=
 go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.38.0 h1:GqRJVj7UmLjCVyVJ3ZFLdPRmhDUp2zFmQe3RHIOsw24=
 go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.38.0/go.mod h1:ri3aaHSmCTVYu2AWv44YMauwAQc0aqI9gHKIcSbI1pU=
 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.33.0 h1:wpMfgF8E1rkrT1Z6meFh1NDtownE9Ii3n3X2GJYjsaU=
 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.33.0/go.mod h1:wAy0T/dUbs468uOlkT31xjvqQgEVXv58BRFWEgn5v/0=
-go.opentelemetry.io/otel/metric v1.38.0 h1:Kl6lzIYGAh5M159u9NgiRkmoMKjvbsKtYRwgfrA6WpA=
-go.opentelemetry.io/otel/metric v1.38.0/go.mod h1:kB5n/QoRM8YwmUahxvI3bO34eVtQf2i4utNVLr9gEmI=
+go.opentelemetry.io/otel/metric v1.39.0 h1:d1UzonvEZriVfpNKEVmHXbdf909uGTOQjA0HF0Ls5Q0=
+go.opentelemetry.io/otel/metric v1.39.0/go.mod h1:jrZSWL33sD7bBxg1xjrqyDjnuzTUB0x1nBERXd7Ftcs=
 go.opentelemetry.io/otel/sdk v1.38.0 h1:l48sr5YbNf2hpCUj/FoGhW9yDkl+Ma+LrVl8qaM5b+E=
 go.opentelemetry.io/otel/sdk v1.38.0/go.mod h1:ghmNdGlVemJI3+ZB5iDEuk4bWA3GkTpW+DOoZMYBVVg=
 go.opentelemetry.io/otel/sdk/metric v1.38.0 h1:aSH66iL0aZqo//xXzQLYozmWrXxyFkBJ6qT5wthqPoM=
 go.opentelemetry.io/otel/sdk/metric v1.38.0/go.mod h1:dg9PBnW9XdQ1Hd6ZnRz689CbtrUp0wMMs9iPcgT9EZA=
-go.opentelemetry.io/otel/trace v1.38.0 h1:Fxk5bKrDZJUH+AMyyIXGcFAPah0oRcT+LuNtJrmcNLE=
-go.opentelemetry.io/otel/trace v1.38.0/go.mod h1:j1P9ivuFsTceSWe1oY+EeW3sc+Pp42sO++GHkg4wwhs=
+go.opentelemetry.io/otel/trace v1.39.0 h1:2d2vfpEDmCJ5zVYz7ijaJdOF59xLomrvj7bjt6/qCJI=
+go.opentelemetry.io/otel/trace v1.39.0/go.mod h1:88w4/PnZSazkGzz/w84VHpQafiU4EtqqlVdxWy+rNOA=
 go.opentelemetry.io/proto/otlp v1.7.1 h1:gTOMpGDb0WTBOP8JaO72iL3auEZhVmAQg4ipjOVAtj4=
 go.opentelemetry.io/proto/otlp v1.7.1/go.mod h1:b2rVh6rfI/s2pHWNlB7ILJcRALpcNDzKhACevjI+ZnE=
 go.step.sm/crypto v0.75.0 h1:UAHYD6q6ggYyzLlIKHv1MCUVjZIesXRZpGTlRC/HSHw=
@@ -396,8 +396,8 @@ golang.org/x/net v0.6.0/go.mod h1:2Tu9+aMcznHK/AK1HMvgo6xiTLG5rD5rZLDS+rp2Bjs=
 golang.org/x/net v0.10.0/go.mod h1:0qNGK6F8kojg2nk9dLZ2mShWaEBan6FAoqfSigmmuDg=
 golang.org/x/net v0.47.0 h1:Mx+4dIFzqraBXUugkia1OOvlD6LemFo1ALMHjrXDOhY=
 golang.org/x/net v0.47.0/go.mod h1:/jNxtkgq5yWUGYkaZGqo27cfGZ1c5Nen03aYrrKpVRU=
-golang.org/x/oauth2 v0.33.0 h1:4Q+qn+E5z8gPRJfmRy7C2gGG3T4jIprK6aSYgTXGRpo=
-golang.org/x/oauth2 v0.33.0/go.mod h1:lzm5WQJQwKZ3nwavOZ3IS5Aulzxi68dUSgRHujetwEA=
+golang.org/x/oauth2 v0.34.0 h1:hqK/t4AKgbqWkdkcAeI8XLmbK+4m4G5YeQRrmiotGlw=
+golang.org/x/oauth2 v0.34.0/go.mod h1:lzm5WQJQwKZ3nwavOZ3IS5Aulzxi68dUSgRHujetwEA=
 golang.org/x/sync v0.0.0-20180314180146-1d60e4601c6f/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
 golang.org/x/sync v0.0.0-20190423024810-112230192c58/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
 golang.org/x/sync v0.0.0-20220722155255-886fb9371eb4/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
@@ -422,8 +422,8 @@ golang.org/x/sys v0.5.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.6.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.8.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.17.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA=
-golang.org/x/sys v0.38.0 h1:3yZWxaJjBmCWXqhN1qh02AkOnCQ1poK6oF+a7xWL6Gc=
-golang.org/x/sys v0.38.0/go.mod h1:OgkHotnGiDImocRcuBABYBEXf8A9a87e/uXjp9XT3ks=
+golang.org/x/sys v0.39.0 h1:CvCKL8MeisomCi6qNZ+wbb0DN9E5AATixKsvNtMoMFk=
+golang.org/x/sys v0.39.0/go.mod h1:OgkHotnGiDImocRcuBABYBEXf8A9a87e/uXjp9XT3ks=
 golang.org/x/term v0.0.0-20201126162022-7de9c90e9dd1/go.mod h1:bj7SfCRtBDWHUb9snDiAeCFNEtKQo2Wmx5Cou7ajbmo=
 golang.org/x/term v0.0.0-20210927222741-03fcf44c2211/go.mod h1:jbD1KX2456YbFQfuXm/mYQcufACuNUgVhRMnK/tPxf8=
 golang.org/x/term v0.5.0/go.mod h1:jMB1sMXY+tzblOD4FWmEbocvup2/aLOaQEp7JmGp78k=