Update module github.com/kyverno/kyverno to v1.13.2

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
github.com/kyverno/kyverno	v1.12.6 -> v1.13.2

---

Release Notes

kyverno/kyverno (github.com/kyverno/kyverno)

v1.13.2

Compare Source

❗ Important Notice ❗

• Fixed the breaking change in the Kyverno Helm chart by adding the conversion function regarding the config.webhooks field (#​11651)

✨ Added ✨

• Added manifestIndex to ImageRegistry context (#​9883)
• Added a new field patchedResources in the test results to specify patched resources (#​11297, #​11686)
• Supported label selector context variable in the mutate existing rule (#​11608)

Helm

• Added allowExistingViolations option in kyverno-policies chart (#​11656,#​11714)

🐛 Fixed 🐛

• Fixed webhook reconciliation by the policy type (#​11580)
• Used generate name for background scan reports (#​11586)
• Added missing error check for the generate rule(#​11587)
• Returned nil error when trigger resource of a generate rule is not found for a subresource (#​11594)
• Opened the mutated resources file in append mode to allow additions to it (#​11619)
• Fixed the issue to print generate output in CLI (#​11634)
• Properly verified precondition in old object validation (#​11644, #​11591)
• Fixed metrics-server Helm installation in Makefile (#​11717)

Helm

• Fixed global image registry bug in 3.3.3 (#​11604)
• Fixed the merging of policyExclude customizations to avoid wrong overrides in kyverno-policies chart (#​11653)

🔧 Others 🔧

• Set the UserAgent in client-go based calls to kube-apiserver (#​11569)
• Tested upgrade conformance in CI (#​11498, #​11602)
• Reduced logging for URs (#​11616)
• Fixed API call chainsaw tests (#​11682)

v1.13.1

Compare Source

✨ Added ✨

• Added the validation check for webhook configurations using CEL (#​11461)

🐛 Fixed 🐛

• Skipped Azure keychain-based login for MCR registry (#​11480)
• Fixed a validate issue to match failure action case-insensitively when validating an old object (#​11486)
• Fixed the missing emitWarning field in the v2beta1 policy (#​11489)
• Fixed the CLI to support VAP stable version v1 (#​11501)
• Fixed the auto-gen rules regarding celPreconditions (#​11503)
• Fixed a CLI issue by setting the default namespace for namespaced policies (#​11505)
• Fixed the configurable namespaceSelector list in the webhook (#​11516)
• Fixed an issue that the image verification rule blocks resource's update (#​11529)
• Fixed the policy validation message to include keywords "immutable fields" (#​11549)
• Fixed a panic issue for the admission controller when processing the validate rule (#​11550)

Helm

• Corrected Helm configuration behavior for global image registry (#​11482)

🔧 Others 🔧

• Switched to use the digest instead of the tag (#​11492)

v1.13.0

Compare Source

Note

• Removed deprecated flag reportsChunkSize.
• Added --tufRootRaw flag to pass tuf root for custom sigstore deployments.

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

ℹ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 10 additional dependencies were updated
• The go directive was updated for compatibility reasons

Details:

Package	Change
go	1.23.2 -> 1.23.4
github.com/prometheus/common	v0.55.0 -> v0.59.1
golang.org/x/exp	v0.0.0-20240719175910-8a7402abbf56 -> v0.0.0-20240823005443-9b4947da3948
golang.org/x/net	v0.28.0 -> v0.29.0
golang.org/x/oauth2	v0.21.0 -> v0.23.0
golang.org/x/sys	v0.24.0 -> v0.26.0
golang.org/x/term	v0.23.0 -> v0.25.0
golang.org/x/text	v0.17.0 -> v0.19.0
golang.org/x/time	v0.5.0 -> v0.6.0
k8s.io/apiextensions-apiserver	v0.31.0 -> v0.31.1
k8s.io/utils	v0.0.0-20240711033017-18e509b52bc8 -> v0.0.0-20240902221715-702e33fdd3c3