chore(deps): close the gaps renovate cannot see

golang.org/x/sys was v0.45.0 in the config-reloader module and v0.46.0 in the
other four.

.go-version said 1.26.0 while .tool-versions and the release Dockerfile both
say 1.26.3, so CI compiled on a different toolchain than the shipped image.

One docker/login-action on the release publish path was still v2.2.0 while
every other use in the same file was v3.7.0. Major updates are disabled in
renovate.json, so it was never going to catch up on its own.

The KIND node image is not a *_VERSION variable, so the general Makefile
manager cannot see it. It now has a manager of its own that also tracks the
digest.

Signed-off-by: Bence Csati <bence.csati@axoflow.com>

Author: csatib02

.github/workflows/artifacts.yaml

@@ -475,7 +475,7 @@ jobs:
           path: ${{ steps.build.outputs.package }}
 
       - name: Login to GitHub Container Registry
-        uses: docker/login-action@465a07811f14bebb1938fbed4728c6a1ff8901fc # v2.2.0
+        uses: docker/login-action@c94ce9fb468520275223c153574b00df6fe4bcc9 # v3.7.0
         with:
           registry: ghcr.io
           username: ${{ github.actor }}

.go-version

@@ -1 +1 @@
-1.26.0
+1.26.3

renovate.json

@@ -41,6 +41,20 @@
       "description": [
         "setup-envtest can only use Kubernetes versions that have published envtest binaries, which ship as envtest-v* releases of controller-tools."
       ]
+    },
+    {
+      "customType": "regex",
+      "managerFilePatterns": [
+        "/^Makefile$/"
+      ],
+      "matchStrings": [
+        "KIND_IMAGE\\s*\\?*=\\s*kindest/node:(?<currentValue>[^@\\s]+)@(?<currentDigest>sha256:[a-f0-9]+)"
+      ],
+      "datasourceTemplate": "docker",
+      "depNameTemplate": "kindest/node",
+      "description": [
+        "The KIND node image is not a *_VERSION variable, so the general Makefile manager does not see it."
+      ]
     }
   ],
   "enabled": true,