fix(deps): update module github.com/vshn/appcat/v4 to v4.191.0

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
github.com/vshn/appcat/v4	v4.163.4 → v4.191.0

---

Release Notes

vshn/appcat (github.com/vshn/appcat/v4)

v4.191.0

Compare Source

3 changes since v4.190.0

🚀 Features

• Expose metrics for pin image tag (#​713)

🐛 Fixes

• Fix a potential early return for pg ready check (#​716)
• Read gateway domain from observed XLS, not connection details (#​717)

v4.190.0

Compare Source

10 changes since v4.189.2

🚀 Features

• Add auto initialize script to OpenBao Service (#​693)
• Allow exposing Redis via LoadBalancer or TCPGateway (#​707)
• Allow exposing MariaDB via LoadBalancer or TCPGateway (#​711)

🐛 Fixes

• fix(mariadb): omit mariadb configuration on initial reconcile (#​699)
• fix(maintenance): skip pre maintenance backup when backups are disabled (#​706)
• Add default validation webhook for garage (#​708)
• Override APPUiO activeDeadlineSeconds (#​705)
• Read desired release in redis pvc resize fallback (#​714)
• Use common.ExternalAccessEnabled in cnpg (#​712)

📄 Documentation

• Docs: Deprecation announcement guidelines (#​701)

v4.189.2

Compare Source

0 changes since v4.189.1

v4.189.1

Compare Source

0 changes since v4.189.0

v4.189.0

Compare Source

2 changes since v4.188.2

🚀 Features

• Configure user managed keycloak image (#​686)

🐛 Fixes

• Fix cnpg retention (#​694)

v4.188.2

Compare Source

1 changes since v4.188.1

🐛 Fixes

• Make luks key secret object name deterministic (#​691)

v4.188.1

Compare Source

1 changes since v4.188.0

🐛 Fixes

• Fix pinImageTag leaking into the nested service (#​689)

v4.188.0

Compare Source

2 changes since v4.187.0

🚀 Features

• Add allowed namespaces to vshngarage (#​682)

🐛 Fixes

• Allow deletion of HTTPRoute cert Object on FQDN change (#​681)

v4.187.0

Compare Source

5 changes since v4.186.2

🚀 Features

• Add ability to disable maintenance via component (#​668)
• Allow adding additional resources to the instance namespace (#​675)

🐛 Fixes

• Fix missed garage crd version (#​670)
• Return warning on error in enableSSHInRelease (#​678)
• Fix the topologyKey for CNPG Cluster (#​676)

v4.186.2

Compare Source

0 changes since v4.186.1

v4.186.1

Compare Source

0 changes since v4.186.0

v4.186.0

Compare Source

12 changes since v4.185.0

🚀 Features

• Add SLI prober for Garage (#​651)
• Add generic objectbucket implementation (#​642)
• Add HTTPRoute as alternative to ingress (#​645)
• Add Generalized TCPRoute handler (#​653)
• Initialize OpenBao Service (#​630)
• Add TCP Gateway to CNPG PostgreSQL (#​659)
• Allow disabling Keycloak admin interface (#​660)
• Rework guaranteed availability webhook (#​658)
• Adjust runtime to properly support provider-kubernetes SSA (#​663)

🐛 Fixes

• Move SSH XListenerSet to instance namespace and filter webhook scope (#​650)
• Also pass admin credentials to apply job (#​665)
• Update garage apiversion (#​664)

v4.185.0

Compare Source

9 changes since v4.184.1

🚀 Features

• Add self-service restore for CNPG (#​633)
• Expose CNPG PostgreSQL via loadbalancer (#​636)
• Add controller for garage bucket cleanup (#​639)

🐛 Fixes

• Fix memory leaks (#​635)
• Fix an early return when bringing your own bucket (#​640)
• Move TCPRoute to instance namespace and scope XListenerSet to it (#​646)
• Change instance id sha function (#​644)
• Fix updated schedules not being reflected in status (#​637)
• Duplicate billing events sent to Odoo on status update failure (#​647)

v4.184.1

Compare Source

0 changes since v4.184.0

v4.184.0

Compare Source

8 changes since v4.183.0

🚀 Features

• Adjust billing service to servala (#​612)
• Add ability to bring your own bucket (#​621)
• Add cnpg user access (#​629)
• Keycloak: keep apply config for 12 hours after completion (#​627)
• Add SSH support to VSHNForgejo (#​598)
• Allow major version upgrades for cnpg (#​623)
• Fix namespace quotas for appuio cloud (#​631)

🐛 Fixes

• Add missing sidecar and init container to config (#​628)

v4.183.0

Compare Source

10 changes since v4.182.1

🚀 Features

• Expose oauth2 client configuration for forgejo (#​613)
• Make proxysql resources configurable (#​616)
• Add additional fields for CNPG extensions (#​620)

🐛 Fixes

• Block nextcloud downgrade (#​609)
• Fix race condition in initial-maintenance job creation (#​614)
• Change to vacuum analyze for cnpg (#​615)
• Add new memory alert for DB services and add alert to all DB services (#​617)
• Fix empty string serverName parameter for CNPG (#​618)
• Fix keycloak restore copy job (#​622)
• Fix keycloak connnection to stackgres (#​624)

v4.182.1

Compare Source

1 changes since v4.182.0

🐛 Fixes

• Configure CNPG PDB based on instance count (#​610)

v4.182.0

Compare Source

8 changes since v4.181.0

🚀 Features

• Make Keycloak initcontainer image tag configurable (#​597)
• Feat: CNPG extensions (#​602)
• Add Garage Service (#​601)
• Add Garage Bucket implementation for ObjectBucket (#​603)
• Remove hard-coded map for CNPG versions (#​605)

🐛 Fixes

• fix(maintenance): abort release and maintenance if backup fails (#​599)
• Allow deletion of custom image pull secret for Keycloak (#​600)
• Add CNPG user alerting (#​604)

v4.181.0

Compare Source

6 changes since v4.180.1

🚀 Features

• Set Nextcloud cronjob securityContext to run as www-data (#​589)
• Bump forgejo version (#​594)
• Use CNPG as nested service for Keycloak (#​592)

🐛 Fixes

• Fix race condition for database-creation in user management of postgres (#​591)
• Fix MariaDB alerting bugs and prevent alert spam (#​588)
• Fix maintenance schedule mutation and day rollover bugs (#​590)

v4.180.1

Compare Source

0 changes since v4.180.0

v4.180.0

Compare Source

3 changes since v4.179.1

🚀 Features

• Allow disabling maintenance and release (#​576)
• Add pin image tag attribute (#​583)

📄 Documentation

• Clarify Repack and Vacuum API docs (#​584)

v4.179.1

Compare Source

1 changes since v4.179.0

🚀 Features

• Shorten premaint backup name (#​577)

v4.179.0

Compare Source

5 changes since v4.178.0

🚀 Features

• Allow deletion of copy-job for vshnpostgresql (#​572)
• Extend billing service (#​567)
• CNPG: Change backup implementation to barman cloud plugin (#​532)

🐛 Fixes

• Adjust grant logic for PostgreSQL for db and schema level grants (#​569)
• Limit metadata.name length for all services (#​571)

v4.178.0

Compare Source

6 changes since v4.177.0

🚀 Features

• Allow QoS guaranteed for VSHNPostgreSQL (#​558)
• Use merge commit SHA for image builds on PR merge (#​563)
• Add crossplane metrics exporter to appcat controller (#​561)
• Make unmanaged deletion protection generic (#​557)
• Schedule backup before maintenance (#​566)

🐛 Fixes

• Default to ClusterIP when service type empty (#​565)

v4.177.0

Compare Source

4 changes since v4.176.0

🚀 Features

• Allow instances to be downscaled to 0 (#​549)
• Update Nextcloud Helmchart to 8.6.0 (#​555)
• Add Exoscale specific annotations for quotas (#​556)

🐛 Fixes

• Make sure names are escaped during ready check (#​553)

v4.176.0

Compare Source

1 changes since v4.175.0

🐛 Fixes

• Fix broken codey webhook (#​547)

v4.175.0

Compare Source

5 changes since v4.174.1

🚀 Features

• Add tls to mariadb spks clusters (#​534)
• CNPG: Add maintenance (#​522)
• Extend ServiceMonitor with realms metrics (#​548)
• Enhance Keycloak configuration handling and resource copying (#​544)

🐛 Fixes

• Allow keycloak ingress deletion (#​531)

v4.174.1

Compare Source

0 changes since v4.174.0

v4.174.0

Compare Source

5 changes since v4.173.2

🚀 Features

• Update redis versions (#​540)

🐛 Fixes

• Fix various Nextcloud bugs (#​538)
• Expose composition label in prometheus metrics (#​537)
• Sequence user management for postgresql and mariadb (#​525)
• Fix setup-filesystem initcontainer resources (#​533)

v4.173.2

Compare Source

0 changes since v4.173.1

v4.173.1

Compare Source

1 changes since v4.173.0

🐛 Fixes

• Fix revision age to maintenance (#​529)

v4.173.0

Compare Source

11 changes since v4.172.0

🚀 Features

• Fix custom resource allocation for VSHNPostgreSQL instances (#​515)
• CNPG: Add scaling, network policy (#​502)
• Patroni container now has Requests = Limits (#​518)
• Added option to disable envoy for VSHNPostgreSQL (#​521)
• Make Collabora FQDN nonmandatory (#​524)

🐛 Fixes

• Change category for the billing CRD (#​516)
• Conditionally add the ownerRef (#​520)
• Update default mariadb database collation (#​517)
• Fix merge reference in workflow (#​494)
• Various maintenance improvements (#​519)
• CNPG: Fix majorVersion (#​526)

v4.172.0

Compare Source

6 changes since v4.171.3

🚀 Features

• VSHNPostgresBackups: Add support for CNPG backups (#​498)
• Label for removing the version pinning (#​496)
• Add event billing management (#​506)
• Defer release of latest revision by 7 days (#​511)

🐛 Fixes

• Configure e2e test in non converged mode (#​483)
• Fix emtpy compositionRef for nested PG (#​513)

v4.171.3

Compare Source

1 changes since v4.171.2

🐛 Fixes

• Fixed nextcloud cronjob indentation (#​510)

v4.171.2

Compare Source

1 changes since v4.171.1

🐛 Fixes

• Fix merge-hotfix job (#​508)

v4.171.1

Compare Source

2 changes since v4.171.0

🐛 Fixes

• Disable billing controller via flag by default (#​503)
• Fixed affinity for nextcloud cronjob to be scheduled on the same node (#​507)

v4.171.0

Compare Source

8 changes since v4.170.0

🚀 Features

• Feature: Deploy VSHNPostgreSQL using CNPG (#​468)
• Block downsizing of a PVC beloning to AppCat (#​486)
• Fix codey webhook (#​497)
• Make proxysql report the actual mariadb server version (#​495)
• Event based billing controller (#​489)
• Feature: CNPG backup (#​492)

🐛 Fixes

• Fixed naming of the luks secret for stackgres VSHNPostgreSQL implementation (#​493)
• Add RBAC for providerconfig checks (#​491)

v4.170.0

Compare Source

8 changes since v4.169.0

🚀 Features

• STS resizer for non-converged setups (#​475)
• Bind appcat-scc to nextcloud only on openshift (#​480)
• Switch nextcloud cron handling via cronjob (#​482)
• Make bucket name optional (#​481)
• Add option to disable backups for all appcat services (#​467)
• Adjust comp-functions for new redis chart (#​455)

🐛 Fixes

• Do not run PR workflow on automated release (#​477)
• Remove runAsUser value when deploying to OpenShift (#​485)

v4.169.0

Compare Source

8 changes since v4.168.2

🚀 Features

• Make releaser more generic (#​469)
• Webhook to ensure valid values for the label appcat.vshn.io/provider-config on composites (#​470)
• Redis HA alerting (#​466)

🐛 Fixes

• Fixed permission denied error for nextcloud backups (#​463)
• Remove title in merge workflow hotfix check (#​472)
• Update psql stackgres queries to the latest version (#​471)
• Add nextcloud scc (#​474)
• Fix extra mariadb config (#​473)

v4.168.2

Compare Source

1 changes since v4.168.1

🐛 Fixes

• Revert "Implemented sequencing for the user management of postgresql" (#​464)

v4.168.1

Compare Source

1 change since v4.168.0

🐛 Fixes

• Check generated secrets by fields (#​462)

v4.168.0

Compare Source

9 changes since v4.167.0

🚀 Features

• Trigger release in pre-release workflow (#​448)
• Validate VSHNPG encryption state (#​450)
• Fixed the deprovisioning of Postgres getting stuck (#​454)
• Removed omitempty from default=true boolean fields (#​452)
• Sequencing for the user management of postgresql (#​456)
• Clear the argocd instance label (#​453)
• Fixed long startup times on nextcloud via security contexts (#​457)

🐛 Fixes

• Expand maintenance window (#​451)
• Fix some more bugs with user provisioning (#​458)

v4.167.0

Compare Source

3 changes since v4.166.2

🚀 Features

• Helm Chart updates August 2025 (#​445)
• Keep 1 successful job after maintenance (#​444)

🐛 Fixes

• Fix bug in UserManagement if username != dbname (#​446)

v4.166.2

Compare Source

1 changes since v4.166.1

🚀 Features

• Fix Redis restore and pvc resize (#​441)

v4.166.1

Compare Source

1 changes since v4.166.0

🐛 Fixes

• Switch Bitnami images to legacy registry (#​438)

v4.166.0

Compare Source

9 changes since v4.165.1

🚀 Features

• Add envFrom field to VSHNKeycloak (#​394)
• Add support for Redis HA (#​423)

🐛 Fixes

• New updates detected with Cruft (#​428)
• Make maintenance compatible with the split architecture (#​430)
• Fixing some race conditions and e2e (#​433)

📄 Documentation

• Update PR template (#​435)

🔗 Dependency Updates

• New updates detected with Cruft (#​434)
• New updates detected with Cruft (#​436)
• New updates detected with Cruft (#​439)

v4.165.1

Compare Source

1 changes since v4.165.0

🐛 Fixes

• Fix race conditions due to desiredComposite (#​431)

v4.165.0

Compare Source

2 changes since v4.164.0

🚀 Features

• Add envFrom field to VSHNKeycloak (#​394)

🐛 Fixes

• Ensure Keycloak Config Apply Job Executes on Initial Install (#​425)

v4.164.0

Compare Source

1 changes since v4.163.4

🐛 Fixes

• Allow deletion of the Keycloak config apply job (#​418)

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 10 additional dependencies were updated
• The go directive was updated for compatibility reasons

Details:

Package	Change
go	1.24.0 -> 1.25.0
github.com/go-logr/logr	v1.4.2 -> v1.4.3
golang.org/x/mod	v0.25.0 -> v0.34.0
golang.org/x/net	v0.41.0 -> v0.53.0
golang.org/x/oauth2	v0.27.0 -> v0.34.0
golang.org/x/sync	v0.15.0 -> v0.20.0
golang.org/x/sys	v0.33.0 -> v0.43.0
golang.org/x/term	v0.32.0 -> v0.42.0
golang.org/x/text	v0.26.0 -> v0.36.0
golang.org/x/tools	v0.34.0 -> v0.43.0
google.golang.org/protobuf	v1.36.5 -> v1.36.11