chore(deps): update dependency kyverno/kyverno to v1.13.2

[renovate]

This PR contains the following updates:

Package	Update	Change
kyverno/kyverno	minor	v1.12.5 -> v1.13.2

---

Release Notes

kyverno/kyverno (kyverno/kyverno)

v1.13.2

Compare Source

❗ Important Notice ❗

• Fixed the breaking change in the Kyverno Helm chart by adding the conversion function regarding the config.webhooks field (#​11651)

✨ Added ✨

• Added manifestIndex to ImageRegistry context (#​9883)
• Added a new field patchedResources in the test results to specify patched resources (#​11297, #​11686)
• Supported label selector context variable in the mutate existing rule (#​11608)

Helm

• Added allowExistingViolations option in kyverno-policies chart (#​11656,#​11714)

🐛 Fixed 🐛

• Fixed webhook reconciliation by the policy type (#​11580)
• Used generate name for background scan reports (#​11586)
• Added missing error check for the generate rule(#​11587)
• Returned nil error when trigger resource of a generate rule is not found for a subresource (#​11594)
• Opened the mutated resources file in append mode to allow additions to it (#​11619)
• Fixed the issue to print generate output in CLI (#​11634)
• Properly verified precondition in old object validation (#​11644, #​11591)
• Fixed metrics-server Helm installation in Makefile (#​11717)

Helm

• Fixed global image registry bug in 3.3.3 (#​11604)
• Fixed the merging of policyExclude customizations to avoid wrong overrides in kyverno-policies chart (#​11653)

🔧 Others 🔧

• Set the UserAgent in client-go based calls to kube-apiserver (#​11569)
• Tested upgrade conformance in CI (#​11498, #​11602)
• Reduced logging for URs (#​11616)
• Fixed API call chainsaw tests (#​11682)

v1.13.1

Compare Source

✨ Added ✨

• Added the validation check for webhook configurations using CEL (#​11461)

🐛 Fixed 🐛

• Skipped Azure keychain-based login for MCR registry (#​11480)
• Fixed a validate issue to match failure action case-insensitively when validating an old object (#​11486)
• Fixed the missing emitWarning field in the v2beta1 policy (#​11489)
• Fixed the CLI to support VAP stable version v1 (#​11501)
• Fixed the auto-gen rules regarding celPreconditions (#​11503)
• Fixed a CLI issue by setting the default namespace for namespaced policies (#​11505)
• Fixed the configurable namespaceSelector list in the webhook (#​11516)
• Fixed an issue that the image verification rule blocks resource's update (#​11529)
• Fixed the policy validation message to include keywords "immutable fields" (#​11549)
• Fixed a panic issue for the admission controller when processing the validate rule (#​11550)

Helm

• Corrected Helm configuration behavior for global image registry (#​11482)

🔧 Others 🔧

• Switched to use the digest instead of the tag (#​11492)

v1.13.0

Compare Source

Note

• Removed deprecated flag reportsChunkSize.
• Added --tufRootRaw flag to pass tuf root for custom sigstore deployments.

v1.12.6

Compare Source

🐛 Fixed 🐛

• Change: Disable updaterequest cleanup cronjob (#​10678)
• Fix(helm): Remove namespace from RoleBinding/roleRef field (#​10685)
• Fix: Properly use useCache field in image verification policies (#​10709)
• Fix: Check for the client being nil before applying a mutation (#​10726)
• Fix: Resource namespace checks for Kyverno CLI (#​10738)
• Fix: Range through all resources to build webhook (#​10748)
• Fix: Get namespace labels before creating a policy context (#​10773)
• Fix: Wrong evaluation of pod security standard version (#​10924)
• Fix: Frequent API GET/UPDATE requests regarding webhooks reconciliation when no policies (#​11203, #​11225, #​11230, #​11233)

🔧 Others 🔧

• Fix: Bump docker in release 1.12 (#​11088)
• Fix: Updated Go version to v1.22.7 to address CVE-2024-34156 (#​11142)
• Chore: Bump chainsaw (#​10687)
• Chore: Bump github.com/docker/docker from 26.1.3+incompatible to 26.1.4+incompatible (#​10750)

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.