Update devTools non-major

[ske-renovate-ce]

This PR contains the following updates:

Package	Update	Change
golangci/golangci-lint	minor	v2.6.2 -> v2.7.2
ko-build/ko	patch	v0.18.0 -> v0.18.1

---

Release Notes

golangci/golangci-lint (golangci/golangci-lint)

v2.7.2

Compare Source

Released on 2025-12-07

1. Linter bug fixes
   • gosec: from 2.22.10 to daccba6

v2.7.1

Compare Source

Released on 2025-12-04

1. Linter bug fixes
   • modernize: disable stringscut analyzer

v2.7.0

Compare Source

Released on 2025-12-03

1. Bug fixes
   • fix: clone args used by custom command
2. Linters new features or changes
   • no-sprintf-host-port: from 0.2.0 to 0.3.1 (ignore string literals without a colon)
   • unqueryvet: from 1.2.1 to 1.3.0 (handles const and var declarations)
   • revive: from 1.12.0 to 1.13.0 (new option: enable-default-rules, new rules: forbidden-call-in-wg-go, unnecessary-if, inefficient-map-lookup)
   • modernize: from 0.38.0 to 0.39.0 (new analyzers: plusbuild, stringscut)
3. Linters bug fixes
   • perfsprint: from 0.10.0 to 0.10.1
   • wrapcheck: from 2.11.0 to 2.12.0
   • godoc-lint: from 0.10.1 to 0.10.2
4. Misc.
   • Add some flags to the custom command
5. Documentation
   • docs: split changelog v1 and v2

ko-build/ko (ko-build/ko)

v0.18.1

Compare Source

What's Changed

• update labelsNode to match new labels interface in kube 1.34 by @​ecordell in #​1584

Other

• build(deps): bump k8s.io/apimachinery from 0.33.0 to 0.33.1 by @​dependabot[bot] in #​1513
• Revert "drop -m flag" to fix empty SBOM generation in v0.18.0 by @​0xiso in #​1514
• build(deps): bump github.com/google/go-containerregistry from 0.20.4-0.20250225234217-098045d5e61f to 0.20.4 by @​dependabot[bot] in #​1516
• build(deps): bump sigs.k8s.io/kind from 0.27.0 to 0.29.0 by @​dependabot[bot] in #​1517
• build(deps): bump github.com/google/go-containerregistry from 0.20.4 to 0.20.5 by @​dependabot[bot] in #​1518
• Update ko version used in CI by @​maboehm in #​1501
• build(deps): bump golang.org/x/sync from 0.14.0 to 0.15.0 by @​dependabot[bot] in #​1522
• build(deps): bump golang.org/x/tools from 0.33.0 to 0.34.0 by @​dependabot[bot] in #​1521
• build(deps): bump github.com/google/go-containerregistry from 0.20.5 to 0.20.6 by @​dependabot[bot] in #​1527
• build(deps): bump github.com/go-viper/mapstructure/v2 from 2.2.1 to 2.3.0 by @​dependabot[bot] in #​1529
• build(deps): bump github.com/sigstore/cosign/v2 from 2.5.0 to 2.5.1 by @​dependabot[bot] in #​1530
• build(deps): bump github.com/sigstore/cosign/v2 from 2.5.1 to 2.5.2 by @​dependabot[bot] in #​1531
• build(deps): bump k8s.io/apimachinery from 0.33.1 to 0.33.2 by @​dependabot[bot] in #​1532
• build(deps): bump github.com/docker/docker from 28.2.2+incompatible to 28.3.0+incompatible by @​dependabot[bot] in #​1533
• build(deps): bump github.com/docker/docker from 28.3.0+incompatible to 28.3.1+incompatible by @​dependabot[bot] in #​1535
• build(deps): bump golang.org/x/sync from 0.15.0 to 0.16.0 by @​dependabot[bot] in #​1537
• build(deps): bump github.com/docker/docker from 28.3.1+incompatible to 28.3.2+incompatible by @​dependabot[bot] in #​1538
• build(deps): bump github.com/go-viper/mapstructure/v2 from 2.3.0 to 2.4.0 by @​dependabot[bot] in #​1540
• build(deps): bump k8s.io/apimachinery from 0.33.2 to 0.33.3 by @​dependabot[bot] in #​1541
• build(deps): bump github.com/sigstore/cosign/v2 from 2.5.2 to 2.5.3 by @​dependabot[bot] in #​1542
• bump cosign and rekor to HEAD to fix cve for go-chi/chi dep by @​cpanato in #​1547
• build(deps): bump golang.org/x/tools from 0.34.0 to 0.36.0 by @​dependabot[bot] in #​1546
• build(deps): bump github.com/docker/docker from 28.3.2+incompatible to 28.3.3+incompatible by @​dependabot[bot] in #​1544
• build(deps): bump k8s.io/apimachinery from 0.33.3 to 0.33.4 by @​dependabot[bot] in #​1549
• build(deps): bump github.com/stretchr/testify from 1.10.0 to 1.11.0 by @​dependabot[bot] in #​1551
• build(deps): bump github.com/stretchr/testify from 1.11.0 to 1.11.1 by @​dependabot[bot] in #​1553
• build(deps): bump sigs.k8s.io/kind from 0.29.0 to 0.30.0 by @​dependabot[bot] in #​1552
• build(deps): bump github.com/spf13/cobra from 1.9.1 to 1.10.1 by @​dependabot[bot] in #​1555
• build(deps): bump github.com/docker/docker from 28.3.3+incompatible to 28.4.0+incompatible by @​dependabot[bot] in #​1556
• build(deps): bump golang.org/x/tools from 0.36.0 to 0.37.0 by @​dependabot[bot] in #​1561
• Update go-chi by @​gcemaj in #​1567
• build(deps): bump github.com/spf13/viper from 1.20.1 to 1.21.0 by @​dependabot[bot] in #​1559
• build(deps): bump github.com/docker/docker from 28.4.0+incompatible to 28.5.0+incompatible by @​dependabot[bot] in #​1570
• build(deps): bump golang.org/x/tools from 0.37.0 to 0.38.0 by @​dependabot[bot] in #​1573
• build(deps): bump github.com/docker/docker from 28.5.0+incompatible to 28.5.1+incompatible by @​dependabot[bot] in #​1572
• Split stdout and stderr when running go env by @​DrJosh9000 in #​1574
• build(deps): bump github.com/docker/docker from 28.5.1+incompatible to 28.5.2+incompatible by @​dependabot[bot] in #​1575
• build(deps): bump golang.org/x/sync from 0.17.0 to 0.18.0 by @​dependabot[bot] in #​1576
• build(deps): bump github.com/awslabs/amazon-ecr-credential-helper/ecr-login from 0.10.1 to 0.11.0 by @​dependabot[bot] in #​1577
• build(deps): bump golang.org/x/tools from 0.38.0 to 0.39.0 by @​dependabot[bot] in #​1579
• build(deps): bump golang.org/x/crypto from 0.44.0 to 0.45.0 by @​dependabot[bot] in #​1581
• build(deps): bump github.com/google/go-containerregistry from 0.20.6 to 0.20.7 by @​dependabot[bot] in #​1582
• build(deps): bump github.com/spf13/cobra from 1.10.1 to 1.10.2 by @​dependabot[bot] in #​1583
• build(deps): bump golang.org/x/sync from 0.18.0 to 0.19.0 by @​dependabot[bot] in #​1586
• build(deps): bump golang.org/x/tools from 0.39.0 to 0.40.0 by @​dependabot[bot] in #​1585
• update labelsNode to match new labels interface in kube 1.34 by @​ecordell in #​1584
• update deps by @​imjasonh in #​1589

New Contributors

• @​0xiso made their first contribution in #​1514
• @​maboehm made their first contribution in #​1501
• @​gcemaj made their first contribution in #​1567
• @​DrJosh9000 made their first contribution in #​1574
• @​ecordell made their first contribution in #​1584

Full Changelog: ko-build/ko@v0.18.0...v0.18.1

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.

[ske-prow]

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by:
Once this PR has been reviewed and has the lgtm label, please assign rapsnx for approval. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Details

Needs approval from an approver in each of these files:

• OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[ske-renovate-ce]

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.