chore(deps): update devtools non-major (release-v1.32)

[ske-renovate-ce]

This PR contains the following updates:

Package	Update	Change
chainguard-dev/apko	patch	v0.30.27 -> v0.30.31
golangci/golangci-lint	minor	v2.6.2 -> v2.7.2
ko-build/ko	patch	v0.18.0 -> v0.18.1

---

Release Notes

chainguard-dev/apko (chainguard-dev/apko)

v0.30.31

Compare Source

Changelog

• f62a501 build(deps): bump chainguard.dev/sdk from 0.1.44 to 0.1.45 (#​1980)

v0.30.30

Compare Source

Changelog

• d2cb85c build(deps): bump github.com/chainguard-dev/clog from 1.7.0 to 1.8.0 (#​1981)

v0.30.29

Compare Source

Changelog

• 0b3827a build(deps): bump github.com/spf13/cobra from 1.10.1 to 1.10.2 (#​1966)

v0.30.28

Compare Source

Changelog

• db61eae Gracefully handle cached files being deleted (#​1959)

golangci/golangci-lint (golangci/golangci-lint)

v2.7.2

Compare Source

Released on 2025-12-07

1. Linter bug fixes
   • gosec: from 2.22.10 to daccba6

v2.7.1

Compare Source

Released on 2025-12-04

1. Linter bug fixes
   • modernize: disable stringscut analyzer

v2.7.0

Compare Source

Released on 2025-12-03

1. Bug fixes
   • fix: clone args used by custom command
2. Linters new features or changes
   • no-sprintf-host-port: from 0.2.0 to 0.3.1 (ignore string literals without a colon)
   • unqueryvet: from 1.2.1 to 1.3.0 (handles const and var declarations)
   • revive: from 1.12.0 to 1.13.0 (new option: enable-default-rules, new rules: forbidden-call-in-wg-go, unnecessary-if, inefficient-map-lookup)
   • modernize: from 0.38.0 to 0.39.0 (new analyzers: plusbuild, stringscut)
3. Linters bug fixes
   • perfsprint: from 0.10.0 to 0.10.1
   • wrapcheck: from 2.11.0 to 2.12.0
   • godoc-lint: from 0.10.1 to 0.10.2
4. Misc.
   • Add some flags to the custom command
5. Documentation
   • docs: split changelog v1 and v2

ko-build/ko (ko-build/ko)

v0.18.1

Compare Source

What's Changed

• update labelsNode to match new labels interface in kube 1.34 by @​ecordell in #​1584

Other

• build(deps): bump k8s.io/apimachinery from 0.33.0 to 0.33.1 by @​dependabot[bot] in #​1513
• Revert "drop -m flag" to fix empty SBOM generation in v0.18.0 by @​0xiso in #​1514
• build(deps): bump github.com/google/go-containerregistry from 0.20.4-0.20250225234217-098045d5e61f to 0.20.4 by @​dependabot[bot] in #​1516
• build(deps): bump sigs.k8s.io/kind from 0.27.0 to 0.29.0 by @​dependabot[bot] in #​1517
• build(deps): bump github.com/google/go-containerregistry from 0.20.4 to 0.20.5 by @​dependabot[bot] in #​1518
• Update ko version used in CI by @​maboehm in #​1501
• build(deps): bump golang.org/x/sync from 0.14.0 to 0.15.0 by @​dependabot[bot] in #​1522
• build(deps): bump golang.org/x/tools from 0.33.0 to 0.34.0 by @​dependabot[bot] in #​1521
• build(deps): bump github.com/google/go-containerregistry from 0.20.5 to 0.20.6 by @​dependabot[bot] in #​1527
• build(deps): bump github.com/go-viper/mapstructure/v2 from 2.2.1 to 2.3.0 by @​dependabot[bot] in #​1529
• build(deps): bump github.com/sigstore/cosign/v2 from 2.5.0 to 2.5.1 by @​dependabot[bot] in #​1530
• build(deps): bump github.com/sigstore/cosign/v2 from 2.5.1 to 2.5.2 by @​dependabot[bot] in #​1531
• build(deps): bump k8s.io/apimachinery from 0.33.1 to 0.33.2 by @​dependabot[bot] in #​1532
• build(deps): bump github.com/docker/docker from 28.2.2+incompatible to 28.3.0+incompatible by @​dependabot[bot] in #​1533
• build(deps): bump github.com/docker/docker from 28.3.0+incompatible to 28.3.1+incompatible by @​dependabot[bot] in #​1535
• build(deps): bump golang.org/x/sync from 0.15.0 to 0.16.0 by @​dependabot[bot] in #​1537
• build(deps): bump github.com/docker/docker from 28.3.1+incompatible to 28.3.2+incompatible by @​dependabot[bot] in #​1538
• build(deps): bump github.com/go-viper/mapstructure/v2 from 2.3.0 to 2.4.0 by @​dependabot[bot] in #​1540
• build(deps): bump k8s.io/apimachinery from 0.33.2 to 0.33.3 by @​dependabot[bot] in #​1541
• build(deps): bump github.com/sigstore/cosign/v2 from 2.5.2 to 2.5.3 by @​dependabot[bot] in #​1542
• bump cosign and rekor to HEAD to fix cve for go-chi/chi dep by @​cpanato in #​1547
• build(deps): bump golang.org/x/tools from 0.34.0 to 0.36.0 by @​dependabot[bot] in #​1546
• build(deps): bump github.com/docker/docker from 28.3.2+incompatible to 28.3.3+incompatible by @​dependabot[bot] in #​1544
• build(deps): bump k8s.io/apimachinery from 0.33.3 to 0.33.4 by @​dependabot[bot] in #​1549
• build(deps): bump github.com/stretchr/testify from 1.10.0 to 1.11.0 by @​dependabot[bot] in #​1551
• build(deps): bump github.com/stretchr/testify from 1.11.0 to 1.11.1 by @​dependabot[bot] in #​1553
• build(deps): bump sigs.k8s.io/kind from 0.29.0 to 0.30.0 by @​dependabot[bot] in #​1552
• build(deps): bump github.com/spf13/cobra from 1.9.1 to 1.10.1 by @​dependabot[bot] in #​1555
• build(deps): bump github.com/docker/docker from 28.3.3+incompatible to 28.4.0+incompatible by @​dependabot[bot] in #​1556
• build(deps): bump golang.org/x/tools from 0.36.0 to 0.37.0 by @​dependabot[bot] in #​1561
• Update go-chi by @​gcemaj in #​1567
• build(deps): bump github.com/spf13/viper from 1.20.1 to 1.21.0 by @​dependabot[bot] in #​1559
• build(deps): bump github.com/docker/docker from 28.4.0+incompatible to 28.5.0+incompatible by @​dependabot[bot] in #​1570
• build(deps): bump golang.org/x/tools from 0.37.0 to 0.38.0 by @​dependabot[bot] in #​1573
• build(deps): bump github.com/docker/docker from 28.5.0+incompatible to 28.5.1+incompatible by @​dependabot[bot] in #​1572
• Split stdout and stderr when running go env by @​DrJosh9000 in #​1574
• build(deps): bump github.com/docker/docker from 28.5.1+incompatible to 28.5.2+incompatible by @​dependabot[bot] in #​1575
• build(deps): bump golang.org/x/sync from 0.17.0 to 0.18.0 by @​dependabot[bot] in #​1576
• build(deps): bump github.com/awslabs/amazon-ecr-credential-helper/ecr-login from 0.10.1 to 0.11.0 by @​dependabot[bot] in #​1577
• build(deps): bump golang.org/x/tools from 0.38.0 to 0.39.0 by @​dependabot[bot] in #​1579
• build(deps): bump golang.org/x/crypto from 0.44.0 to 0.45.0 by @​dependabot[bot] in #​1581
• build(deps): bump github.com/google/go-containerregistry from 0.20.6 to 0.20.7 by @​dependabot[bot] in #​1582
• build(deps): bump github.com/spf13/cobra from 1.10.1 to 1.10.2 by @​dependabot[bot] in #​1583
• build(deps): bump golang.org/x/sync from 0.18.0 to 0.19.0 by @​dependabot[bot] in #​1586
• build(deps): bump golang.org/x/tools from 0.39.0 to 0.40.0 by @​dependabot[bot] in #​1585
• update labelsNode to match new labels interface in kube 1.34 by @​ecordell in #​1584
• update deps by @​imjasonh in #​1589

New Contributors

• @​0xiso made their first contribution in #​1514
• @​maboehm made their first contribution in #​1501
• @​gcemaj made their first contribution in #​1567
• @​DrJosh9000 made their first contribution in #​1574
• @​ecordell made their first contribution in #​1584

Full Changelog: ko-build/ko@v0.18.0...v0.18.1

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.

[ske-prow]

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by:
Once this PR has been reviewed and has the lgtm label, please assign hasit97 for approval. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Details

Needs approval from an approver in each of these files:

• OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment