deps: bump Updatecli GH action to v3.8.0

[updateclibot]

deps: bump Updatecli GH action

deps: update Updatecli used by Github Action to v3.8.0

change detected: * key "$.jobs.*.steps[?(@.uses =~ /^updatecli\\/updatecli-action/)].uses" updated from "updatecli/updatecli-action@ca8c01bf875e2520512c344a71dd02f3dc3326a7" to "updatecli/updatecli-action@2efa15cbae1751f532f9bfc88f56adafd6d1faed", in file ".github/workflows/updatecli.yaml" (doc 0) * key "$.jobs.*.steps[?(@.uses =~ /^updatecli\\/updatecli-action/)].uses" updated from "updatecli/updatecli-action@ca8c01bf875e2520512c344a71dd02f3dc3326a7" to "updatecli/updatecli-action@2efa15cbae1751f532f9bfc88f56adafd6d1faed", in file ".github/workflows/updatecli_test.yaml" (doc 0) * key "$.jobs.*.steps[?(@.uses =~ /^updatecli\\/updatecli-action/)].uses" updated from "updatecli/updatecli-action@ca8c01bf875e2520512c344a71dd02f3dc3326a7" to "updatecli/updatecli-action@2efa15cbae1751f532f9bfc88f56adafd6d1faed", in file ".github/workflows/updatecli_update.yaml" (doc 0)

GitHub Action workflow link

deps: Updatecli version used by GitHub action

deps: update Updatecli used by Github Action to v0.122.0

change detected: * key "$.jobs.*.steps[?(@.uses =~ /^updatecli\\/updatecli-action/)].with.version" updated from "v0.121.0" to "v0.122.0", in file ".github/workflows/updatecli.yaml" (doc 0) * key "$.jobs.*.steps[?(@.uses =~ /^updatecli\\/updatecli-action/)].with.version" updated from "v0.121.0" to "v0.122.0", in file ".github/workflows/updatecli_test.yaml" (doc 0) * key "$.jobs.*.steps[?(@.uses =~ /^updatecli\\/updatecli-action/)].with.version" updated from "v0.121.0" to "v0.122.0", in file ".github/workflows/updatecli_update.yaml" (doc 0)

v0.122.0

## Changes

## 🚀 Features

- feat: allow to store policy assets on oci registry @olblak (#8301)
- chore: move updatecli manifest validate out of experimental @olblak (#10586)
- feat: support relative path, relative to Updatecli manifest files. @olblak (#10150)
- feat(autodiscovery/npm): support vulnerability detection @olblak (#10512)
- feat(autodiscovery/golang): support vulnerability detection @olblak (#10534)
- feat: add vulnerability detection plugin using osv database @olblak (#10497)

## 🐛 Bug Fixes

- fix(docker): use TARGETPLATFORM for base image @alecharp (#10584)
- fix: manifest version don't warn on prerelease @olblak (#10554)
- fix(pep440): skip pre-releases when the pattern is a constraint @loispostula (#10546)
- fix: allow to use dynamic info in pipeline name @olblak (#10510)

## 🧰 Maintenance

- feat: add release candidate pipeline @olblak (#10553)
- deps(golang): Bump minor version for go.opentelemetry.io module @[updateclibot[bot]](https://github.com/apps/updateclibot) (#10552)
- deps(go): bump module github.com/beevik/etree to v1.8.0 @[updateclibot[bot]](https://github.com/apps/updateclibot) (#10525)
- chore(ci): upgrade uv version @[updateclibot[bot]](https://github.com/apps/updateclibot) (#10513)
- chore(dockerfile): upgrade node version @[updateclibot[bot]](https://github.com/apps/updateclibot) (#10498)
- deps: bump Updatecli GH action to v3.7.0 @[updateclibot[bot]](https://github.com/apps/updateclibot) (#10492)
- deps(go): bump module github.com/fluxcd/source-controller/api to v1.9.5 @[updateclibot[bot]](https://github.com/apps/updateclibot) (#10488)
- deps(go): bump module github.com/yuin/goldmark to v1.8.6 @[updateclibot[bot]](https://github.com/apps/updateclibot) (#10483)
- deps(go): bump module github.com/moby/buildkit to v0.33.0 @[updateclibot[bot]](https://github.com/apps/updateclibot) (#10476)
- deps(go): bump module github.com/drone/go-scm to v1.42.15 @[updateclibot[bot]](https://github.com/apps/updateclibot) (#10473)
- deps(go): bump module github.com/google/go-containerregistry to v0.22.1 @[updateclibot[bot]](https://github.com/apps/updateclibot) (#10464)
- chore(dockerfile): upgrade node version @[updateclibot[bot]](https://github.com/apps/updateclibot) (#10450)
- chore(ci): upgrade uv version @[updateclibot[bot]](https://github.com/apps/updateclibot) (#10441)
- install Updatecli gha workflows v0.121.0 @[updateclibot[bot]](https://github.com/apps/updateclibot) (#10430)
- Create issue template for Updatecli release process @olblak (#10410)

## 📝 Documentation

- doc: revamp comments used for jsonschema @olblak (#10590)
- doc: update compatibility and versioning information @olblak (#10547)

## Contributors

@alecharp, @loispostula, @olblak, @updateclibot[bot], [updateclibot[bot]](https://github.com/apps/updateclibot) and updatecli

## Sponsors

If Updatecli is useful to you, please consider sponsoring it.  
Your support helps maintain and improve this project.

[![GitHub stars](https://img.shields.io/github/stars/updatecli/updatecli?style=for-the-badge)](https://github.com/updatecli/updatecli/stargazers) [![Sponsor](https://img.shields.io/badge/Sponsor-%E2%9D%A4-pink?style=for-the-badge)](https://www.updatecli.io/support/#sponsor-or-donate)

v0.121.0

## Changes

## 🚀 Features

- feat: Revamp udash login @olblak (#9924)
- feat(gitlab/branch): add age support @olblak (#10279)
- feat(gitlab/release): add age support @olblak (#10280)
- feat(gitlab/tag): add age support @olblak (#10281)
- feat(gitcommit): support age filtering @olblak (#10240)
- feat(githubaction): support dependency cooldown in autodiscovery @loispostula (#10151)
- feat(yaml)!: add createmissingkey and appendtoarray to the yaml resource @olblak (#10193)
- feat: better display config templating issues @olblak (#10132)
- feat: support cooldown dependency for npm @olblak (#9915)

## 🐛 Bug Fixes

- fix(github): don't close a pullrequest containing changes @olblak (#10373)
- fix: don't run a action operation after creation @olblak (#10374)
- fix(npm/age): When no version matching age found, skipping instead of error @olblak (#10298)
- fix(yaml): stop retrying an unrecoverable decode error in condition @loispostula (#10238)
- fix(autodiscovery/helmfile): use relative file path in generated manifests @alecharp (#10109)
- fix: hash the full source spec for the cache key @gangadhar-res (#9970)

## 🧰 Maintenance

- deps(go): bump module github.com/fluxcd/helm-controller/api to v1.6.4 @[updateclibot[bot]](https://github.com/apps/updateclibot) (#10389)
- fix: updatecli policies @olblak (#10372)
- deps(go): bump module go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc to v1.46.0 @[updateclibot[bot]](https://github.com/apps/updateclibot) (#10355)
- chore(deps): bump google.golang.org/grpc from 1.83.1 to 1.83.2 in the go_modules group across 1 directory @[dependabot[bot]](https://github.com/apps/dependabot) (#10350)
- deps(go): bump module go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp to v0.71.0 @[updateclibot[bot]](https://github.com/apps/updateclibot) (#10343)
- deps(go): bump module go.opentelemetry.io/otel/exporters/stdout/stdouttrace to v1.46.0 @[updateclibot[bot]](https://github.com/apps/updateclibot) (#10339)
- chore(go): use age shared error message @olblak (#10299)
- deps(go): bump module github.com/google/go-containerregistry to v0.22.0 @[updateclibot[bot]](https://github.com/apps/updateclibot) (#10283)
- deps(go): bump module go.opentelemetry.io/otel to v1.46.0 @[updateclibot[bot]](https://github.com/apps/updateclibot) (#10260)
- deps(go): bump module github.com/drone/go-scm to v1.42.14 @[updateclibot[bot]](https://github.com/apps/updateclibot) (#10275)
- deps(go): bump module helm.sh/helm/v3 to v3.21.4 @[updateclibot[bot]](https://github.com/apps/updateclibot) (#10257)
- deps(go): bump module github.com/beevik/etree to v1.7.1 @[updateclibot[bot]](https://github.com/apps/updateclibot) (#10249)
- deps: bump golangci-lint to v2.13.2 @[updateclibot[bot]](https://github.com/apps/updateclibot) (#10217)
- chore(deps): bump google.golang.org/grpc from 1.83.0 to 1.83.1 in the go_modules group across 1 directory @[dependabot[bot]](https://github.com/apps/dependabot) (#10239)
- deps(go): bump module github.com/sirupsen/logrus to v1.10.2 @[updateclibot[bot]](https://github.com/apps/updateclibot) (#10232)
- deps: Bump Golang version to 1.27.1 @[updateclibot[bot]](https://github.com/apps/updateclibot) (#10216)
- deps(updatecli/policies): bump all policies @[updateclibot[bot]](https://github.com/apps/updateclibot) (#10215)
- chore(dockerfile): upgrade node version @[updateclibot[bot]](https://github.com/apps/updateclibot) (#10179)
- chore(ci): upgrade uv version @[updateclibot[bot]](https://github.com/apps/updateclibot) (#10174)
- chore(ci): upgrade uv version @[updateclibot[bot]](https://github.com/apps/updateclibot) (#10157)
- deps: Bump Golang version to 1.27.0 @[updateclibot[bot]](https://github.com/apps/updateclibot) (#10129)
- deps: bump golangci-lint to v2.13.1 @[updateclibot[bot]](https://github.com/apps/updateclibot) (#10137)
- install Updatecli gha workflows v0.120.1 @[updateclibot[bot]](https://github.com/apps/updateclibot) (#10130)
- chore: fix linting issues @olblak (#10110)
- chore: Add Updatecli workflows for syncing and monitoring @olblak (#10116)
- fix: golangci-lint checks @olblak (#10103)
- chore(deps): bump github.com/moby/go-archive from 0.2.1 to 0.3.0 in the go_modules group across 1 directory @[dependabot[bot]](https://github.com/apps/dependabot) (#10088)
- deps(go): bump module github.com/fluxcd/source-controller/api to v1.9.4 @[updateclibot[bot]](https://github.com/apps/updateclibot) (#10093)
- deps(go): bump module go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc to v1.45.0 @[updateclibot[bot]](https://github.com/apps/updateclibot) (#10077)
- deps(go): bump module github.com/santhosh-tekuri/jsonschema/v6 to v6.0.3 @[updateclibot[bot]](https://github.com/apps/updateclibot) (#10080)
- deps(go): bump module github.com/testcontainers/testcontainers-go to v0.44.0 @[updateclibot[bot]](https://github.com/apps/updateclibot) (#10069)
- deps(go): bump module go.opentelemetry.io/otel/exporters/stdout/stdouttrace to v1.45.0 @[updateclibot[bot]](https://github.com/apps/updateclibot) (#10064)
- deps: bump Updatecli GH action to v3.6.0 @[updateclibot[bot]](https://github.com/apps/updateclibot) (#10057)
- deps(go): bump module github.com/google/go-containerregistry to v0.21.9 @[updateclibot[bot]](https://github.com/apps/updateclibot) (#10049)
- deps(go): bump module go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp to v1.45.0 @[updateclibot[bot]](https://github.com/apps/updateclibot) (#10037)
- deps(golang): Bump minor version for github.com/aws module @[updateclibot[bot]](https://github.com/apps/updateclibot) (#10014)
- deps(go): bump module github.com/moby/buildkit to v0.32.2 @[updateclibot[bot]](https://github.com/apps/updateclibot) (#9989)
- chore(dockerfile): upgrade node version @[updateclibot[bot]](https://github.com/apps/updateclibot) (#9971)
- chore(ci): upgrade uv version @[updateclibot[bot]](https://github.com/apps/updateclibot) (#9959)
- deps: bump Updatecli GH action to v0.120.1 @[updateclibot[bot]](https://github.com/apps/updateclibot) (#9945)
- deps(go): bump module go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp to v0.70.0 @[updateclibot[bot]](https://github.com/apps/updateclibot) (#9942)

## Contributors

@alecharp, @dependabot[bot], @gangadhar-res, @loispostula, @olblak, @updateclibot[bot], [dependabot[bot]](https://github.com/apps/dependabot), [updateclibot[bot]](https://github.com/apps/updateclibot) and updatecli

## Sponsors

If Updatecli is useful to you, please consider sponsoring it.  
Your support helps maintain and improve this project.

[![GitHub stars](https://img.shields.io/github/stars/updatecli/updatecli?style=for-the-badge)](https://github.com/updatecli/updatecli/stargazers) [![Sponsor](https://img.shields.io/badge/Sponsor-%E2%9D%A4-pink?style=for-the-badge)](https://www.updatecli.io/support/#sponsor-or-donate)

GitHub Action workflow link

---

Created automatically by Updatecli Options: Most of Updatecli configuration is done via its manifest(s). If you close this pull request, Updatecli will automatically reopen it, the next time it runs. If you close this pull request and delete the base branch, Updatecli will automatically recreate it, erasing all previous commits made. Feel free to report any issues at github.com/updatecli/updatecli. If you find this tool useful, do not hesitate to star our GitHub repository as a sign of appreciation, and/or to tell us directly on our chat!

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Advanced

Run ID: 4a508bbf-7de4-4309-823d-6901835bae97

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}