fix(deps): update minor and patch updates

Author: renovate[bot]

.github/workflows/python.yaml

@@ -59,7 +59,7 @@ jobs:
       - name: Set up Python 3.10
         uses: actions/setup-python@v5
         with:
-          python-version: "3.13"
+          python-version: "3.14"
 
       - name: Bump version
         run: sed 's/version = ".*"/version = "${{ github.ref_name }}"/' -i pyproject.toml && git diff

argocd-cmp/Dockerfile

@@ -1,5 +1,5 @@
-FROM python:3.13-slim AS build_base
-COPY --from=ghcr.io/astral-sh/uv:0.8.13 /uv /bin/uv
+FROM python:3.14-slim AS build_base
+COPY --from=ghcr.io/astral-sh/uv:0.9.23 /uv /bin/uv
 
 #: Build Nyl itself.
 #: -----------------
@@ -41,7 +41,7 @@ RUN \
 FROM fetch-bin-base AS argocd-bin
 # Find ArgoCD releases at https://github.com/argoproj/argo-cd/releases
 # renovate: datasource=github-releases depName=argocd packageName=argoproj/argo-cd
-ARG ARGOCD_VERSION=v3.1.1
+ARG ARGOCD_VERSION=v3.2.3
 RUN curl -sSfLo /usr/local/bin/argocd https://github.com/argoproj/argo-cd/releases/download/${ARGOCD_VERSION}/argocd-linux-$(cat /BINARY_ARCH) \
     && chmod +x /usr/local/bin/argocd \
     && upx /usr/local/bin/argocd \
@@ -50,7 +50,7 @@ RUN curl -sSfLo /usr/local/bin/argocd https://github.com/argoproj/argo-cd/releas
 FROM fetch-bin-base AS helm-bin
 # Find Helm releases at https://github.com/helm/helm/releases
 # renovate: datasource=github-releases depName=helm packageName=helm/helm
-ARG HELM_VERSION=v3.18.6
+ARG HELM_VERSION=v3.19.4
 RUN curl -fsSL -o get_helm.sh https://raw.githubusercontent.com/helm/helm/main/scripts/get-helm-3 \
     && chmod 700 get_helm.sh \
     && ./get_helm.sh --version $HELM_VERSION \
@@ -60,7 +60,7 @@ RUN curl -fsSL -o get_helm.sh https://raw.githubusercontent.com/helm/helm/main/s
 FROM fetch-bin-base AS sops-bin
 # Find SOPS releases at https://github.com/getsops/sops/releases
 # renovate: datasource=github-releases depName=sops packageName=getsops/sops
-ARG SOPS_VERSION=v3.10.2
+ARG SOPS_VERSION=v3.11.0
 RUN curl -fLO https://github.com/getsops/sops/releases/download/${SOPS_VERSION}/sops-${SOPS_VERSION}.linux.$(cat /BINARY_ARCH) \
     && mv sops-${SOPS_VERSION}.linux.$(cat /BINARY_ARCH) /usr/local/bin/sops \
     && chmod +x /usr/local/bin/sops \
@@ -69,7 +69,7 @@ RUN curl -fLO https://github.com/getsops/sops/releases/download/${SOPS_VERSION}/
 
 FROM fetch-bin-base AS kyverno-bin
 # renovate: datasource=github-releases depName=kyverno packageName=kyverno/kyverno
-ARG KYVERNO_VERSION=1.15.1
+ARG KYVERNO_VERSION=1.16.2
 RUN \
     case "$(uname -m)" in \
         x86_64) KYVERNO_ARCH='x86_64' ;; \
@@ -84,7 +84,7 @@ RUN \
 #: Build the ArgoCD CMP server image.
 #: ----------------------------------
 
-FROM python:3.13-slim AS nyl-cmp
+FROM python:3.14-slim AS nyl-cmp
 RUN apt-get update && \
     apt-get install -y --no-install-recommends git && \
     rm -rf /var/lib/apt/lists/*

mise.toml

@@ -1,10 +1,10 @@
 [tools]
 "cargo:tire" = "0.1.2"
 kyverno = "1.14.4"
-uv = "0.8.13"
-sops = "3.10.2"
-helm = "3.18.6"
-kubectl = "1.33.4"
+uv = "0.9.23"
+sops = "3.11.0"
+helm = "3.19.4"
+kubectl = "1.35.0"
 "pipx:slap-cli" = "1.15.0"
 
 [tasks.build-docs]

pyproject.toml

@@ -18,7 +18,7 @@ dependencies = [
     "pyroscope-io>=0.8.11",
     "pyyaml>=6.0.1",
     "requests>=2.32.3",
-    "stablehash>=0.2.1,<0.3.0",
+    "stablehash>=0.3.0,<0.4.0",
     "structured-templates>=0.1.1",
     "typer>=0.12.3",
     "typing-extensions>=4.12.2",