chore(deps): update ghcr.io/argoproj/argo-helm/argocd-image-updater docker tag to v1.3.1

[renovate]

This PR contains the following updates:

Package	Update	Change
ghcr.io/argoproj/argo-helm/argocd-image-updater	minor	1.2.4 → 1.3.1

---

Release Notes

argoproj-labs/argocd-image-updater (ghcr.io/argoproj/argo-helm/argocd-image-updater)

v1.3.0

What's Changed

• chore(deps): bump github.com/bradleyfalzon/ghinstallation/v2 from 2.17.0 to 2.18.0 by @​dependabot[bot] in #​1619
• chore: test/ginkgo: bump image-updater from v1.1.1 to v1.2.0 by @​dkarpele in #​1628
• chore(deps): bump golang.org/x/oauth2 from 0.34.0 to 0.36.0 by @​dependabot[bot] in #​1618
• chore(deps): bump golang.org/x/crypto from 0.49.0 to 0.50.0 by @​dependabot[bot] in #​1617
• chore(deps): bump argo-cd from 3.3.8 to 3.3.9 by @​chengfang in #​1632
• chore(deps): bump argo-cd from 3.3.9 to 3.4.1, go from 1.25.9 to 1.26.0, golangci-lint from 2.5.0 to 2.12.2 by @​chengfang in #​1636
• chore(ginkgo): remove role and rolebinding creation by @​dkarpele in #​1642
• fix(webhook): normalize ghcr repository casing by @​FerasMaali in #​1639
• fix(api): set WriteBackConfig.Method as optional in API by @​dkarpele in #​1647
• fix: allow webhook traffic through NetworkPolicy (#​1544) by @​ystkfujii in #​1633
• chore(deps): bump argo-cd from 3.4.1 to 3.4.2 by @​chengfang in #​1650
• chore(deps): bump registry-scanner from v1.2.0 to v1.2.1 by @​dkarpele in #​1655
• fix(test): correct assert.Equal arg order and wrong webhook type in quay test by @​immanuwell in #​1663
• ci: add unit-tests flag to Codecov coverage uploads by @​AdamSaleh in #​1665
• chore(deps): bump argocd from 3.4.2 to 3.4.3 by @​chengfang in #​1671
• fix(webhook): align standalone webhook HTTP/2 hardening by @​doup2001 in #​1588
• chore(deps): bump golang.org/x/crypto from 0.50.0 to 0.52.0 by @​dependabot[bot] in #​1670
• chore(deps): bump google.golang.org/grpc from 1.80.0 to 1.81.1 by @​dependabot[bot] in #​1666
• chore(deps): bump github.com/onsi/ginkgo/v2 from 2.28.1 to 2.29.0 by @​dependabot[bot] in #​1668
• chore(deps): bump image-updater from 1.2.0 to 1.2.1, and argocd-operator from 0.17 to 0.18 by @​chengfang in #​1674
• feat: support SourceHydrator applications for image updates by @​julianderks in #​1475
• chore(deps): bump github.com/distribution/distribution/v3 from 3.0.0-20230722181636-7b502560cad4 to 3.1.1 by @​dkarpele in #​1675
• feat(webhook): enforce mandatory webhook secret configuration by @​dkarpele in #​1678
• fix(git-write): Thread/Goroutine leak due to un-reaped informer factories during Git write-back by @​chengfang in #​1679
• feat(webhook): add Azure Container Registry (ACR) webhook handler by @​ruturaj220 in #​1681
• fix(webhook-quay): Self-hosted Quay images redirect to quay.io, not self-hosted URL by @​chengfang in #​1683
• ci: run CI tests on push to master by @​AdamSaleh in #​1676
• chore(deps): bump argocd from 3.4.3 to 3.4.4 by @​chengfang in #​1693
• chore(deps): bump ImageUpdater from 1.2.1 to 1.2.2 by @​chengfang in #​1705
• Add blank lines preservation on git writeback by @​rvandernoort in #​1702
• chore(deps): bump actions/checkout from 6 to 7 by @​dependabot[bot] in #​1711
• chore(deps): bump actions/cache from 5 to 6 by @​dependabot[bot] in #​1710
• chore(deps): bump codecov/codecov-action from 6 to 7 by @​dependabot[bot] in #​1709
• chore(deps): bump alpine from 3.23 to 3.24 by @​dependabot[bot] in #​1708
• chore(ci): add allow-unsafe-pr-checkout: true to actions/checkout@​v7 to opt in to allow checkout of fork PRs by @​chengfang in #​1719
• fix(write-back): resolve correct git source for implicit kustomize in multi-source apps by @​rvandernoort in #​1703
• feat: implement image signature verification by @​dkarpele in #​1706
• chore(deps): bump github.com/bradleyfalzon/ghinstallation/v2 from 2.18.0 to 2.19.0 by @​dependabot[bot] in #​1714
• chore(deps): bump google.golang.org/grpc from 1.81.1 to 1.82.0 by @​dependabot[bot] in #​1716
• chore(deps): bump github.com/onsi/gomega from 1.40.0 to 1.42.1 by @​dependabot[bot] in #​1718
• chore(e2e): install cosign to gh actions by @​dkarpele in #​1723
• feat: image verification to work with both modern registry signature lookup and legacy signature formats; test(e2e): image signature verification by @​dkarpele in #​1722
• feat(argocd): support Plugin source type with git write-back by @​flobz in #​1707
• chore(deps): bump argocd from 3.4.4 to 3.4.5 by @​chengfang in #​1726
• feat(pr): Avoid creating duplicate PRs for apps sharing the same write-back-target and updates by @​chengfang in #​1724
• docs: add chansuke to OWNERS reviewers by @​chansuke in #​1731
• fix: reject cross-namespace secret references in git write-back by @​dkarpele in #​1732
• fix: reject cross-namespace secret references in commonUpdateSettings.pullSecret by @​dkarpele in #​1733
• feat: preserve YAML formatting when writing back to Helm values files by @​grahamalama in #​1734
• feat(git): sign write-back commits via GitHub API with GitHub App creds by @​josmo in #​1728
• chore(deps): bump google.golang.org/grpc from 1.82.0 to 1.82.1 by @​dependabot[bot] in #​1736
• chore(deps): bump github.com/google/cel-go from 0.27.0 to 0.29.0 by @​dependabot[bot] in #​1737
• feat(pr): skip git clone, checkout, commit and PR/MR creation if it already exists in the remote github or gitlab by @​chengfang in #​1738
• fix(docs): use current values of updateStrategy (semver, newest-build, digest and alphabetical) and de-emphasize deprecated values by @​chengfang in #​1740
• fix(log): pass the context to git commands by @​dkarpele in #​1742
• feat(plugin): support applications of type plugin and plugin env variables by @​chengfang in #​1741
• chore(deps): bump argocd from 3.4.5 to 3.4.6 by @​chengfang in #​1744
• chore(deps): bump github/codeql-action from 4 to 4.37.3 by @​dependabot[bot] in #​1755
• chore(deps): bump actions/setup-go from 6 to 7 by @​dependabot[bot] in #​1756
• chore(deps): bump github.com/onsi/ginkgo/v2 from 2.29.0 to 2.32.0 by @​dependabot[bot] in #​1751
• chore(deps): bump golang.org/x/sync from 0.21.0 to 0.22.0 by @​dependabot[bot] in #​1749
• chore(deps): bump oras.land/oras-go/v2 from 2.6.0 to 2.6.2 by @​dependabot[bot] in #​1748
• chore(deps): bump golang.org/x/crypto from 0.53.0 to 0.54.0 by @​dependabot[bot] in #​1752
• chore(deps): bump github.com/go-git/go-git/v5 from 5.14.0 to 5.19.2 by @​dependabot[bot] in #​1750
• chore(ci): change to run CodeQL on cron schedule only by @​chengfang in #​1759
• feat: support custom CA certificates for registries by @​w3lld1 in #​1743
• chore(deps): bump github.com/klauspost/compress from 1.18.6 to 1.19.1 in /registry-scanner by @​dependabot[bot] in #​1754
• fix(semver): exclude pre-release tags when no semver constraint is set by @​pujitha24 in #​1758
• chore(deps): bump argocd from 3.4.6 to 3.5.0 by @​chengfang in #​1761
• chore(doc): remove obsolete breaking change labels by @​dkarpele in #​1762
• fix(digest): pick the right live image when multiple containers share the same image by @​C4tWithShell in #​1757
• test: add regression coverage for force-update image with empty registry tags by @​pujitha24 in #​1764
• chore(go-fix): modernize code with go fix command by @​chengfang in #​1765
• fix(kustomize): match images by alias to prevent cross-alias collisions by @​pujitha24 in #​1763
• fix(argocd): retain yaml document start if exists by @​stphnlwlsh in #​1767
• fix(helm): improve getHelmParamNames func to return defaults for image-name and image-tag param names by @​chengfang in #​1771
• chore(deps): bump argocd from 3.5.0 to 3.5.1 by @​chengfang in #​1772
• fix(git-writeback): only commit image-managed Helm parameters to .argocd-source override file by @​pujitha24 in #​1770
• fix(kustomize): reject mis-configured write-back target without kustomization prefix that is a standard kustomization.yaml by @​pujitha24 in #​1766
• chore(deps): bump registry-scanner from 1.2.1 to 1.3.0 by @​chengfang in #​1776
• Release 1.3.0 by @​chengfang in #​1777

New Contributors

• @​FerasMaali made their first contribution in #​1639
• @​ystkfujii made their first contribution in #​1633
• @​immanuwell made their first contribution in #​1663
• @​AdamSaleh made their first contribution in #​1665
• @​doup2001 made their first contribution in #​1588
• @​julianderks made their first contribution in #​1475
• @​ruturaj220 made their first contribution in #​1681
• @​rvandernoort made their first contribution in #​1702
• @​flobz made their first contribution in #​1707
• @​josmo made their first contribution in #​1728
• @​w3lld1 made their first contribution in #​1743
• @​pujitha24 made their first contribution in #​1758
• @​C4tWithShell made their first contribution in #​1757
• @​stphnlwlsh made their first contribution in #​1767

Full Changelog: argoproj-labs/argocd-image-updater@v1.2.2...v1.3.0

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.