fix(deps): update all non-major dependencies

[renovate]

This PR contains the following updates:

Package	Type	Update	Change	Age	Confidence
docker/metadata-action	action	minor	v5.8.0 -> v5.9.0
github.com/docker/docker	require	patch	v28.5.1+incompatible -> v28.5.2+incompatible
github.com/go-vela/server	require	patch	v0.27.2 -> v0.27.3
github.com/urfave/cli/v3	require	minor	v3.5.0 -> v3.6.0
github/codeql-action	action	patch	v4.31.2 -> v4.31.3
golang.org/x/sync	require	minor	v0.17.0 -> v0.18.0
k8s.io/api	require	patch	v0.34.1 -> v0.34.2
k8s.io/apimachinery	require	patch	v0.34.1 -> v0.34.2
k8s.io/client-go	require	patch	v0.34.1 -> v0.34.2

---

Release Notes

docker/metadata-action (docker/metadata-action)

v5.9.0

Compare Source

• Add tag-names output to return tag names without image base name by @​crazy-max in #​553
• Bump @​babel/runtime-corejs3 from 7.14.7 to 7.28.2 in #​539
• Bump @​docker/actions-toolkit from 0.62.1 to 0.66.0 in #​555
• Bump brace-expansion from 1.1.11 to 1.1.12 in #​540
• Bump csv-parse from 5.6.0 to 6.1.0 in #​532
• Bump semver from 7.7.2 to 7.7.3 in in #​554
• Bump tmp from 0.2.3 to 0.2.5 in #​541

Full Changelog: docker/metadata-action@v5.8.0...v5.9.0

docker/docker (github.com/docker/docker)

v28.5.2+incompatible

Compare Source

go-vela/server (github.com/go-vela/server)

v0.27.3

Compare Source

What's Changed

• fix(patch-v0.27.3): backport yaml expansion fix by @​ecrupper in #​1362

Full Changelog: go-vela/server@v0.27.2...v0.27.3

urfave/cli (github.com/urfave/cli/v3)

v3.6.0

Compare Source

What's Changed

• support parallel running of commands by @​oprudkyi in #​2215
• Fix:(issue_2208) Fix local flag by @​dearchap in #​2211
• chore(deps): bump the python-packages group with 2 updates by @​dependabot[bot] in #​2219
• Call actions on flags set from env by @​malclocke in #​2221

New Contributors

• @​malclocke made their first contribution in #​2221

Full Changelog: urfave/cli@v3.5.0...v3.6.0

github/codeql-action (github/codeql-action)

v4.31.3

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

4.31.3 - 13 Nov 2025

• CodeQL Action v3 will be deprecated in December 2026. The Action now logs a warning for customers who are running v3 but could be running v4. For more information, see Upcoming deprecation of CodeQL Action v3.
• Update default CodeQL bundle version to 2.23.5. #​3288

See the full CHANGELOG.md for more information.

kubernetes/api (k8s.io/api)

v0.34.2

Compare Source

kubernetes/apimachinery (k8s.io/apimachinery)

v0.34.2

Compare Source

kubernetes/client-go (k8s.io/client-go)

v0.34.2

Compare Source

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 52.76%. Comparing base (01432d2) to head (5f92d0a).

Additional details and impacted files

@@           Coverage Diff           @@
##             main     #665   +/-   ##
=======================================
  Coverage   52.76%   52.76%           
=======================================
  Files         123      123           
  Lines        5362     5362           
=======================================
  Hits         2829     2829           
  Misses       2321     2321           
  Partials      212      212           

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.