Skip to content

chore(deps): update iac-support-deps#2698

Merged
chance-coleman merged 1 commit into
mainfrom
renovate/iac-support-deps
Jun 9, 2026
Merged

chore(deps): update iac-support-deps#2698
chance-coleman merged 1 commit into
mainfrom
renovate/iac-support-deps

Conversation

@renovate

@renovate renovate Bot commented May 25, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Type Update Change
actions/checkout (changelog) action digest de0fac2 → df4cb1c
actions/checkout action patch v6.0.2 → v6.0.3
aws-actions/configure-aws-credentials (changelog) action digest d979d5b → e7f100c
aws-load-balancer-controller minor 3.3.0 → 3.4.0
kubernetes-sigs/aws-load-balancer-controller minor v3.3.0 → v3.4.0
longhorn (source) minor 1.11.2 → 1.12.0
opentofu/opentofu patch 1.12.0 → 1.12.1
terraform-aws-modules/eks/aws (source) module minor ~> 21.20.0 → ~> 21.23.0
terraform-aws-modules/s3-bucket/aws (source) module minor 5.13.0 → 5.14.0

Release Notes

actions/checkout (actions/checkout)

v6.0.3

Compare Source

kubernetes-sigs/aws-load-balancer-controller (kubernetes-sigs/aws-load-balancer-controller)

v3.4.0

Compare Source

📚 Quick Links

v3.4.0 (requires Kubernetes 1.22+)

Documentation

Image: public.ecr.aws/eks/aws-load-balancer-controller:v3.4.0
Thanks to all our contributors! 😊

🎉 Ingress to Gateway Migration Tool

We are excited to introduce the Ingress to Gateway Migration Tool, the biggest addition in this release! This tooling helps you migrate AWS Load Balancer Controller (LBC) Ingress resources to Gateway API resources, step by step. The migration is designed to be safe and non-disruptive — new ALBs are created alongside your existing ones, so current workloads keep running throughout the entire process.

Two tools are provided to help you migrate with confidence:s

  • lbc-migrate CLI: Translates your Ingress manifests (annotations, rules, and IngressGroups) into equivalent Gateway API YAML. Supports cluster scraping (--from-cluster), file input (-f), directory input (--input-dir), single-Ingress and multi-namespace scoping, and per-namespace output splitting.
  • Migration Console: A local, in-cluster web UI that compares the AWS resource stack produced by both the Ingress and Gateway controllers, field by field. This lets you verify equivalence before applying your Gateway manifests for real.

To get started, see the Migration Guide for the end-to-end walkthrough.

We encourage you to try it out and welcome any feedback via GitHub Issues.

⚠️ Gateway API Behavior Change

Only one L4 route per listener is eligible for traffic when using an NLB Gateway

  • Change: When multiple L4 (TCP/UDP/TLS) routes target the same listener, the controller only forwards traffic to the oldest route. (#​4745).
  • Impact: If you currently attach more than one TCP/UDP/TLS route to the same listener, only the oldest route will continue serving traffic after upgrading. Review your L4 route configurations and consolidate to a single route per listener to avoid unexpected traffic changes.

🔧 Enhancements and Fixes

  • Regex path reconcile loop: Ignore the top-level RegexValues field that AWS mirrors in DescribeRules responses, preventing an unnecessary ModifyRule on every reconcile (#​4749)
  • Service reconciler nil check: Return early in the service reconciler when the load balancer is nil (#​4751)
  • TGC health check for ALB target groups: Fixed an error when updating health check settings in TargetGroupConfiguration for Gateway API ALB target groups (#​4741)
  • NLB weighted target groups: Allow weight 0 for NLB weighted target groups, with a guard requiring at least one non-zero weight (#​4738)
  • Capacity units validation: Validate CapacityUnits on capacity reservation annotations instead of silently dropping parse errors (which reset the reservation to 0) (#​4750)
  • Checkpoint early-exit race: Ensure pods with pending readiness gates are always reconciled, fixing a checkpoint early-exit race with same-IP re-registration (#​4737)
  • Retryable error wrapping: Wrap the last retryable error with a timeout error for clearer failure reporting (#​4761)
  • Readiness gate efficiency: The TargetGroupBinding controller now watches pod events instead of requeueing on a fixed timer when using readiness gates, responding faster while avoiding unnecessary requeues (#​4678)
  • Unit-test workflow permissions: Declare contents: read on the unit-test workflow to pin the default GITHUB_TOKEN to read-only (#​4736)
  • Webhooks upgraded to v1: Admission webhooks were upgraded from v1beta1 to v1. Applied automatically on upgrade — no action needed (#​4743)
  • Listener rule tag reconcile: Reconcile listener rule tags for all matched rules (#​4772)

🌟 Complete Change Log

New Contributors

Full Changelog: kubernetes-sigs/aws-load-balancer-controller@v3.3.0...v3.4.0

longhorn/charts (longhorn)

v1.12.0

Compare Source

Longhorn is a distributed block storage system for Kubernetes.

opentofu/opentofu (opentofu/opentofu)

v1.12.1

Compare Source

SECURITY ADVISORIES:

  • Previous releases in the v1.12 series could be affected by several vulnerabilities:

    • ssh usage through OpenTofu generate hangs or panics.
    • Previously, a revoked 'SignatureKey' belonging to a CA was not correctly checked for revocation. Now, both the 'key' and 'key.SignatureKey' are checked for @revoked.

    This is fixed now by (#​4145)

BUG FIXES:
  • Address a bug introduced in v1.12.0 causing excessive memory usage by providers. (#​4126)
  • Address a bug introduced in v1.12.0 where replace_triggered_by was validated incorrectly. (#​4133
  • The Azure key provider will now accept the tenant_id, subscription_id, environment, and metadata_host variables; a bug previously only allowed these to be set through environment variables. (#​4091)

Full Changelog: https://github.com/opentofu/opentofu/blob/v1.12/CHANGELOG.md

terraform-aws-modules/terraform-aws-eks (terraform-aws-modules/eks/aws)

v21.23.0

Compare Source

Features

v21.22.0

Compare Source

Features
  • Remove is_enabled deprecation warning from Karpenter event_rules output (#​3707) (4bd70c7)

v21.21.0

Compare Source

Features
terraform-aws-modules/terraform-aws-s3-bucket (terraform-aws-modules/s3-bucket/aws)

v5.14.0

Compare Source

Features

Configuration

📅 Schedule: (in timezone America/New_York)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate Bot requested a review from a team as a code owner May 25, 2026 15:32
@github-actions github-actions Bot added the needs-review Label used for Renovate PRs that are ready for review/test label May 25, 2026
@renovate renovate Bot changed the title chore(deps): update iac support dependencies to ~> 21.22.0 chore(deps): update iac-support-deps May 26, 2026
@renovate renovate Bot force-pushed the renovate/iac-support-deps branch 8 times, most recently from 501d811 to ffba60d Compare June 2, 2026 16:46
@renovate renovate Bot force-pushed the renovate/iac-support-deps branch 4 times, most recently from 4b18d21 to 0e4c6a4 Compare June 5, 2026 14:38
@renovate
chore(deps): update iac-support-deps
126882e 
| datasource       | package                                      | from    | to      |
| ---------------- | -------------------------------------------- | ------- | ------- |
| github-tags      | actions/checkout                             | v6.0.2  | v6.0.3  |
| helm             | aws-load-balancer-controller                 | 3.3.0   | 3.4.0   |
| github-tags      | kubernetes-sigs/aws-load-balancer-controller | v3.3.0  | v3.4.0  |
| helm             | longhorn                                     | 1.11.2  | 1.12.0  |
| github-tags      | opentofu/opentofu                            | 1.12.0  | 1.12.1  |
| terraform-module | terraform-aws-modules/eks/aws                | 21.20.0 | 21.23.0 |
| terraform-module | terraform-aws-modules/s3-bucket/aws          | 5.13.0  | 5.14.0  |
@renovate renovate Bot force-pushed the renovate/iac-support-deps branch from 0e4c6a4 to 126882e Compare June 6, 2026 03:10
@chance-coleman chance-coleman added the renovate-ready Label used to trigger Renovate PR CI label Jun 9, 2026
@chance-coleman chance-coleman merged commit 5e220c0 into main Jun 9, 2026
50 of 53 checks passed
@chance-coleman chance-coleman deleted the renovate/iac-support-deps branch June 9, 2026 15:57
@github-actions github-actions Bot mentioned this pull request Jun 9, 2026
Merged
briantwatson pushed a commit that referenced this pull request Jun 9, 2026
@github-actions
chore(main): release 1.6.0 (#2702)
04ce0e7 
🤖 I have created a release *beep* *boop*
---


##
[1.6.0](v1.5.0...v1.6.0)
(2026-06-09)


### Features

* allow a list of principals to access keycloak admin API
([#2714](#2714))
([2f3d014](2f3d014))
* **checkpoint-dev:** make checkpoint work on macOS and without sudo
([#2688](#2688))
([6c0b81f](6c0b81f))
* generate UDPRoute CRD type
([#2704](#2704))
([76182fc](76182fc))
* uds portal as layer in upstream flavor
([#2699](#2699))
([62cd29e](62cd29e))


### Bug Fixes

* exclude portal from registry1 private pki tests
([#2707](#2707))
([523cb84](523cb84))


### Miscellaneous

* add 1.6.0 release notes
([#2729](#2729))
([0fac825](0fac825))
* **deps:** bump qs from 6.15.0 to 6.15.2
([#2695](#2695))
([a0b4fd8](a0b4fd8))
* **deps:** update iac-support-deps
([#2698](#2698))
([5e220c0](5e220c0))
* **deps:** update istio to 1.29.3
([#2676](#2676))
([1936c96](1936c96))
* **deps:** update keycloak to v26.6.2
([#2680](#2680))
([3d7977c](3d7977c))
* **deps:** update loki
([#2693](#2693))
([8262492](8262492))
* **deps:** update loki
([#2709](#2709))
([0f16a7d](0f16a7d))
* **deps:** update pepr to v1.2.1
([#2716](#2716))
([90bfc71](90bfc71))
* **deps:** update portal
([#2712](#2712))
([e7ed8a0](e7ed8a0))
* **deps:** update prometheus-stack
([#2694](#2694))
([dd63525](dd63525))
* **deps:** update support-deps
([#2697](#2697))
([346030a](346030a))
* **deps:** update uds-identity-config 0.28.0
([#2727](#2727))
([08608e3](08608e3))
* **deps:** update vector to v0.56.0
([#2717](#2717))
([c3980a6](c3980a6))
* rename uds to unified defense stack
([#2708](#2708))
([36be3f6](36be3f6))
* update dod root ca certs
([#2720](#2720))
([c2ece26](c2ece26))


### Documentation

* add doc for ambient waypoint pod annotations
([#2715](#2715))
([ed2bb51](ed2bb51))
* portal concepts page
([#2725](#2725))
([8a52447](8a52447))
* portal how-to configuration and flavor page updates
([#2721](#2721))
([197d0ee](197d0ee))

---
This PR was generated with [Release
Please](https://github.com/googleapis/release-please). See
[documentation](https://github.com/googleapis/release-please#release-please).

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@chance-coleman chance-coleman chance-coleman approved these changes

Assignees

No one assigned

Labels

needs-review Label used for Renovate PRs that are ready for review/test renovate-ready Label used to trigger Renovate PR CI

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@chance-coleman