chore(deps): update pepr

[renovate]

This PR contains the following updates:

Package	Type	Update	Change	Age	Adoption	Passing	Confidence
defenseunicorns/uds-common		patch	v0.3.2 -> v0.3.10
pepr	dependencies	minor	0.28.7 -> 0.29.0
registry1.dso.mil/ironbank/opensource/defenseunicorns/pepr/controller (source)		minor	v0.28.7 -> v0.29.0

---

Release Notes

defenseunicorns/uds-common (defenseunicorns/uds-common)

v0.3.10

Compare Source

Miscellaneous

• add a full uds task and inputs (#​95) (7e15fd2)
• add latest-bundle-release task (#​97) (2662f6a)
• attempt to fix renovate (#​98) (8155ecc)
• deps: update uds common support dependencies (#​101) (dfdf927)
• fix renovate env var rule overmatching (#​99) (480497f)
• fix the renovate config github digest pinning (#​100) (4603448)

v0.3.9

Compare Source

Miscellaneous

• fix missing keys in setup actions (#​93) (39d7395)

v0.3.8

Compare Source

Miscellaneous

• add upgrade tests to common (#​91) (bb2e590)
• deps: update dependency defenseunicorns/uds-cli to v0.10.1 (#​84) (6b455b7)
• deps: update dependency defenseunicorns/uds-core to v0.17.0 (#​83) (b8d8181)
• deps: update uds common package dependencies to v6.6.1 (#​92) (862b635)
• update registry login to happen in the common env setup action (#​88) (b7bce88)

v0.3.7

Compare Source

Miscellaneous

• remove schedule on renovate (#​85) (fda7e57)
• update k3d-core-istio-dev to k3d-core-slim-dev (#​86) (aa0e6da)

v0.3.6

Compare Source

Miscellaneous

• hotfix the spoof containing a dash in the input and add a publish step (#​81) (f9c7aac)

v0.3.5

Compare Source

Miscellaneous

• fix spoof to not include a dash (#​79) (5d1738b)

v0.3.4

Compare Source

Miscellaneous

• add the ability to spoof to common (#​77) (49634e1)
• deps: update dependency defenseunicorns/uds-core to v0.16.1 (#​72) (32d1ad6)

v0.3.3

Compare Source

Miscellaneous

• add an explicit architecture input (#​75) (15825d4)

defenseunicorns/pepr (pepr)

v0.29.0

Compare Source

features

• chore: create helper functions for pepr by @​schaeferka in https://github.com/defenseunicorns/pepr/pull/688

getOwnerRefFrom - get fields needed to create an owner ref

// Create a deployment that is "owned" by the WebApp instance 👍 
function deployment(instance: WebApp) {
  const { name, namespace } = instance.metadata!;
  const { replicas } = instance.spec!;

  return {
    apiVersion: "apps/v1",
    kind: "Deployment",
    metadata: {
      ownerReferences: getOwnerRefFrom(instance), // 👈 Instance owns deploymeny
      name,
      namespace,
      labels: {
        "pepr.dev/operator": name,
      },
    },

containers - Get all of the containers from a pod

When(a.Pod)
  .IsCreatedOrUpdated()
  .Validate(po => {
    const podContainers = containers(po); // containers, initContainer, ephemeralContainers 👈 
    for (const container of podContainers) {
      if (
        container.securityContext?.allowPrivilegeEscalation ||
        container.securityContext?.privileged
      ) {
        return po.Deny("Privilege escalation is not allowed");
      }
    }

    return po.Approve();
  });

writeEvent - write an event

async function updateStatus(instance: WebApp, status: Status) {
  await writeEvent(instance, {phase: status}, "Normal", "CreatedOrUpdate", instance.metadata.name, instance.metadata.name);
  await K8s(WebApp).PatchStatus({
    metadata: {
      name: instance.metadata!.name,
      namespace: instance.metadata!.namespace,
    },
    status,
  });
}

kubectl describe wa webapp-light-en -n webapps

### output
Name:         webapp-light-en
Namespace:    webapps
API Version:  pepr.io/v1alpha1
Kind:         WebApp
Metadata: ...
Spec:
  Language:  en
  Replicas:  1
  Theme:     light
Status:
  Observed Generation:  1
  Phase:                Ready
Events:
  Type    Reason                    Age   From             Message
  ----    ------                    ----  ----             -------
  Normal  InstanceCreatedOrUpdated  36s   webapp-light-en  Pending 👈 
  Normal  InstanceCreatedOrUpdated  36s   webapp-light-en  Ready 👈 

Take a look at the sdk functions.
Good job @​schaeferka 👏

What's Changed

• chore: onschedule runs always in dev mode by @​cmwylie19 in https://github.com/defenseunicorns/pepr/pull/725
• chore: update docs on the operator by @​cmwylie19 in https://github.com/defenseunicorns/pepr/pull/726
• chore: bump chainguard/node-lts from cc860c4 to 8c5f0eb by @​dependabot in https://github.com/defenseunicorns/pepr/pull/721
• chore: bump @​types/node from 18.19.29 to 18.19.30 in the development-dependencies group by @​dependabot in https://github.com/defenseunicorns/pepr/pull/720

Full Changelog: defenseunicorns/pepr@v0.28.8...v0.29.0

v0.28.8

Compare Source

What's Changed

• fix: switch to node-lts chainguard image by @​jeff-mccoy in https://github.com/defenseunicorns/pepr/pull/716
• chore: update readme to have inclusive language by @​schristoff in https://github.com/defenseunicorns/pepr/pull/681
• chore: update Contributor Guide Link by @​cmwylie19 in https://github.com/defenseunicorns/pepr/pull/700
• chore: excellent examples new path by @​cmwylie19 in https://github.com/defenseunicorns/pepr/pull/709
• chore: pipeline test by @​cmwylie19 in https://github.com/defenseunicorns/pepr/pull/710
• chore: test exception ci by @​cmwylie19 in https://github.com/defenseunicorns/pepr/pull/707
• chore: e2e integration by @​cmwylie19 in https://github.com/defenseunicorns/pepr/pull/712
• Excellent examples integration by @​cmwylie19 in https://github.com/defenseunicorns/pepr/pull/713
• chore: vulnerability scan by @​cmwylie19 in https://github.com/defenseunicorns/pepr/pull/718
• chore: testing the e2e test by @​cmwylie19 in https://github.com/defenseunicorns/pepr/pull/701
• chore: bump the development-dependencies group with 2 updates by @​dependabot in https://github.com/defenseunicorns/pepr/pull/705
• chore: bump the production-dependencies group with 1 update by @​dependabot in https://github.com/defenseunicorns/pepr/pull/704
• chore: bump actions/setup-node from 2 to 4 by @​dependabot in https://github.com/defenseunicorns/pepr/pull/703
• chore: bump actions/checkout from 2 to 4 by @​dependabot in https://github.com/defenseunicorns/pepr/pull/702
• chore: bump the development-dependencies group with 1 update by @​dependabot in https://github.com/defenseunicorns/pepr/pull/708
• chore: bump actions/checkout from 4.1.1 to 4.1.2 by @​dependabot in https://github.com/defenseunicorns/pepr/pull/719

New Contributors

• @​schristoff made their first contribution in https://github.com/defenseunicorns/pepr/pull/681

Full Changelog: defenseunicorns/pepr@v0.28.7...v0.28.8

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.