chore(deps): bump the go group with 8 updates

[dependabot]

Bumps the go group with 8 updates:

Package	From	To
github.com/fluxcd/helm-controller/api	1.6.2	1.6.3
github.com/fluxcd/kustomize-controller/api	1.9.3	1.9.4
github.com/fluxcd/pkg/kustomize	1.38.0	1.39.0
github.com/go-logr/logr	1.4.3	1.4.4
k8s.io/api	0.36.2	0.36.3
k8s.io/apiextensions-apiserver	0.36.2	0.36.3
k8s.io/apimachinery	0.36.2	0.36.3
k8s.io/client-go	0.36.2	0.36.3

Updates github.com/fluxcd/helm-controller/api from 1.6.2 to 1.6.3

Release notes

Sourced from github.com/fluxcd/helm-controller/api's releases.

v1.6.3

Changelog

v1.6.3 changelog

Container images

• docker.io/fluxcd/helm-controller:v1.6.3
• ghcr.io/fluxcd/helm-controller:v1.6.3

Supported architectures: linux/amd64, linux/arm64 and linux/arm/v7.

The container images are built on GitHub hosted runners and are signed with cosign and GitHub OIDC. To verify the images and their provenance (SLSA level 3), please see the security documentation.

Changelog

Sourced from github.com/fluxcd/helm-controller/api's changelog.

1.6.3

Release date: 2026-07-23

This patch release fixes empty lines vanishing from rendered chart manifests, and releases being marked as tested when their Helm test hooks never ran.

Fixes:

• Fix vanishing empty lines #1545
• Fix HasBeenTested for all corner cases #1548

Improvements:

• ci: parallelize e2e job to speed it up #1543

Commits

• 372c34e Merge pull request #1549 from fluxcd/release-v1.6.3
• 15d0269 Release v1.6.3
• bfbb68b Add changelog entry for v1.6.3
• b5826d7 Merge pull request #1548 from fluxcd/backport-1547-to-release/v1.6.x
• a700445 Fix HasBeenTested to return true only when all filtered test hooks were
• 0b1279b Merge pull request #1545 from fluxcd/fix-1542
• 4bd9db2 Fix vanishing empty lines
• 2b81eb4 Merge pull request #1543 from fluxcd/backport-1528-to-release/v1.6.x
• e2b2b6c Allow Git repo-based chart tests to run in e2e for fork PRs
• 616832e Split e2e scripts into files
• Additional commits viewable in compare view

Updates github.com/fluxcd/kustomize-controller/api from 1.9.3 to 1.9.4

Release notes

Sourced from github.com/fluxcd/kustomize-controller/api's releases.

v1.9.4

Changelog

v1.9.4 changelog

Container images

• docker.io/fluxcd/kustomize-controller:v1.9.4
• ghcr.io/fluxcd/kustomize-controller:v1.9.4

Supported architectures: linux/amd64, linux/arm64 and linux/arm/v7.

The container images are built on GitHub hosted runners and are signed with cosign and GitHub OIDC. To verify the images and their provenance (SLSA level 3), please see the security documentation.

Changelog

Sourced from github.com/fluxcd/kustomize-controller/api's changelog.

1.9.4

Release date: 2026-07-23

This patch release fixes a spec.images entry that sets only some of the image fields discarding the remaining fields already declared for the same image in the kustomization.yaml at spec.path, e.g. overriding only newName produced an untagged image reference.

Fixes:

• Update fluxcd/pkg dependencies #1714

Commits

• 1324b61 Merge pull request #1716 from fluxcd/release-v1.9.4
• 646b63f Release v1.9.4
• 7ce8fca Add changelog entry for v1.9.4
• 0978fa9 Merge pull request #1714 from fluxcd/update-pkg-deps/release/v1.9.x
• 09bd555 Update fluxcd/pkg dependencies
• See full diff in compare view

Updates github.com/fluxcd/pkg/kustomize from 1.38.0 to 1.39.0

Commits

• e2cfd1a Merge pull request #1266 from gecube/kustomize-merge-images
• 56fcba1 kustomize: cover tag/digest pairing in Test_Images
• 812fbbb Update kustomize/kustomize_generator.go
• aee2dab kustomize: preserve existing image fields when merging spec.images
• c8dd701 Merge pull request #1264 from fluxcd/release-main
• 8893563 Prepare for release
• f604533 Merge pull request #1262 from fluxcd/fix-flux2-5986
• 49c22f0 oci: fix insecure not skipping tls verification
• ce58928 Merge pull request #1256 from fluxcd/upgrade-gitlab
• 4ed1f12 git/internal/e2e: upgrade gitlab client to v2
• See full diff in compare view

Updates github.com/go-logr/logr from 1.4.3 to 1.4.4

Release notes

Sourced from github.com/go-logr/logr's releases.

v1.4.4

What's Changed

• drop +build tags by @​pohly in go-logr/logr#401
• CI: avoid floating dependencies, fix issues by @​pohly in go-logr/logr#432
• Bump to Go 1.26 by @​thockin in go-logr/logr#445
• funcr: bound slog.Group nesting depth to prevent stack overflow by @​martinholovsky in go-logr/logr#447
• funcr: Handle and test recursive values by @​thockin in go-logr/logr#446

New Contributors

• @​martinholovsky made their first contribution in go-logr/logr#447

Full Changelog: go-logr/logr@v1.4.3...v1.4.4

Commits

• 96a9aba Fix lint
• 51c6302 Better implementation of pointer recursion checking
• c667114 funcr: Handle and test recursive values
• f7ffadb Add benchmark for pointer args
• e2a3c8e funcr: bound slog.Group nesting depth to prevent stack overflow
• 2886d2b build(deps): bump actions/setup-go from 6.5.0 to 7.0.0
• 0b40896 build(deps): bump github/codeql-action/upload-sarif
• 77f671b Bump to Go 1.26
• cce283f build(deps): bump golangci/golangci-lint-action from 9.2.1 to 9.3.0
• 3832a11 build(deps): bump github/codeql-action/upload-sarif
• Additional commits viewable in compare view

Updates k8s.io/api from 0.36.2 to 0.36.3

Commits

• 3fde3c4 Update dependencies to v0.36.3 tag
• 53c47b9 Merge pull request #140296 from jpbetz/cherry-pick-smd-306-revert
• 1831886 Bump sigs.k8s.io/structured-merge-diff/v6 to v6.3.3
• See full diff in compare view

Updates k8s.io/apiextensions-apiserver from 0.36.2 to 0.36.3

Commits

• 2e78d6f Update dependencies to v0.36.3 tag
• 4b2f007 Merge pull request #140296 from jpbetz/cherry-pick-smd-306-revert
• c8a9346 Add e2e test for setting maps and slices to null via SSA
• b387965 Bump sigs.k8s.io/structured-merge-diff/v6 to v6.3.3
• See full diff in compare view

Updates k8s.io/apimachinery from 0.36.2 to 0.36.3

Commits

• 40bf4b2 Update dependencies to v0.36.3 tag
• 34d46be Merge pull request #140296 from jpbetz/cherry-pick-smd-306-revert
• 66a3724 Bump sigs.k8s.io/structured-merge-diff/v6 to v6.3.3
• See full diff in compare view

Updates k8s.io/client-go from 0.36.2 to 0.36.3

Commits

• 44a8af2 Update dependencies to v0.36.3 tag
• f501ada Merge pull request #140296 from jpbetz/cherry-pick-smd-306-revert
• a43e1d7 Bump sigs.k8s.io/structured-merge-diff/v6 to v6.3.3
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions