chore(deps): update policy-reporter docker tag to v3.9.1 by renovate[bot] · Pull Request #154 · lunarys/gitops

renovate · 2026-07-31T12:50:03Z

This PR contains the following updates:

Package	Update	Change
policy-reporter (source)	minor	`3.7.4` → `3.9.1`

Release Notes

kyverno/policy-reporter (policy-reporter)

`v3.9.1`

Compare Source

fix: update custom board crds, add resource and clusterResource filter

`v3.9.0`

Compare Source

Policy Reporter v3.9.0

feat: set GOMEMLIMIT on application startup based on container or system memory
feat: new resources filter which expects a resource string like pods.v1 or deployments.apps/v1
chore(email): use standardized http client config for graphapi
feat: support filter for results from the resolved namespaces api
feat: add replicaset owner check

Policy Reporter UI v2.7.0

feat: set GOMEMLIMIT on application startup based on container or system memory
feat: compact mode for default dashboards and custom boards
feat: applying custom board filters in the backend changes the previous behavior, in which configured filters were used as default filters in the UI. The new behavior applies these filters on the backend and makes it impossible to remove.
chore(security): the policy reporter core api is no longer exposed via a proxy URI. All requests are now done via the UI backend which applies configured filters and/or authentication.
feat(openidConnect): auto-detect and apply PKCE from OIDC discovery
feat: new cluster config to force attempt http2

Policy Reporter Kyverno Plugin v0.7.0

feat: set GOMEMLIMIT on application startup based on container or system memory

Policy Reporter Trivy Plugin v0.5.0

feat: set GOMEMLIMIT on application startup based on container or system memory

`v3.8.1`

Compare Source

Policy Reporter v3.8.1

fix(api): fall back to embedded HTML report templates [#1479] by arpitjain099
feat(db): new counter metric policy_reporter_database_errors_total for failed DB write operations
feat(api): new API endpoints for cluster statistics

Policy Reporter UI v2.6.1

feat(ui): Cluster Summary Dashboard
feat(ui): init cluster from URL Query in a multi cluster setup
chore(ui): Bump Vuetify to v4

Policy Reporter Trivy Plugin v0.4.15

fix(trivy): avoid panic loading basic auth secret [#359] by Suhani95

Configuration

📅 Schedule: (UTC)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

github-actions · 2026-07-31T12:50:18Z

Helm Template Diff

`policy-reporter` — `3.7.4` → `3.9.1`

96 changed lines

--- /tmp/old.yaml	2026-07-31 12:50:17.305478452 +0000
+++ /tmp/new.yaml	2026-07-31 12:50:16.683476423 +0000
@@ -1,5 +1,5 @@
-Pulled: ghcr.io/kyverno/charts/policy-reporter:3.7.4
-Digest: sha256:34d3086c7f9adfa94636d6aec5e4c3e9c3ff041499dcce7d4f6005850c58b33b
+Pulled: ghcr.io/kyverno/charts/policy-reporter:3.9.1
+Digest: sha256:9beae47d93d1ce24c99974b00b2e58ea3072fea003c14a79c8a9000cb875769a
 ---
 # Source: policy-reporter/templates/serviceaccount.yaml
 apiVersion: v1
@@ -10,11 +10,11 @@
   labels:
     app.kubernetes.io/name: policy-reporter
     app.kubernetes.io/instance: policy-reporter
-    app.kubernetes.io/version: "3.7.4"
+    app.kubernetes.io/version: "3.9.0"
     app.kubernetes.io/component: reporting
     app.kubernetes.io/part-of: policy-reporter
     app.kubernetes.io/managed-by: Helm
-    helm.sh/chart: policy-reporter-3.7.4
+    helm.sh/chart: policy-reporter-3.9.1
 
 ---
 # Source: policy-reporter/templates/ui/serviceaccount.yaml
@@ -26,9 +26,9 @@
   labels:
     app.kubernetes.io/name: policy-reporter-ui
     app.kubernetes.io/instance: policy-reporter
-    app.kubernetes.io/version: "3.7.4"
+    app.kubernetes.io/version: "3.9.0"
     app.kubernetes.io/managed-by: Helm
-    helm.sh/chart: policy-reporter-3.7.4
+    helm.sh/chart: policy-reporter-3.9.1
 automountServiceAccountToken: true
 
 ---
@@ -41,11 +41,11 @@
   labels:
     app.kubernetes.io/name: policy-reporter
     app.kubernetes.io/instance: policy-reporter
-    app.kubernetes.io/version: "3.7.4"
+    app.kubernetes.io/version: "3.9.0"
     app.kubernetes.io/component: reporting
     app.kubernetes.io/part-of: policy-reporter
     app.kubernetes.io/managed-by: Helm
-    helm.sh/chart: policy-reporter-3.7.4
+    helm.sh/chart: policy-reporter-3.9.1
 type: Opaque
 data:
   host: aHR0cDovL3BvbGljeS1yZXBvcnRlcjo4MDgw
@@ -59,14 +59,14 @@
   labels:
     app.kubernetes.io/name: policy-reporter
     app.kubernetes.io/instance: policy-reporter
-    app.kubernetes.io/version: "3.7.4"
+    app.kubernetes.io/version: "3.9.0"
     app.kubernetes.io/component: reporting
     app.kubernetes.io/part-of: policy-reporter
     app.kubernetes.io/managed-by: Helm
-    helm.sh/chart: policy-reporter-3.7.4
+    helm.sh/chart: policy-reporter-3.9.1
 type: Opaque
 data:
-  config.yaml: Y3JkOgogIHRhcmdldENvbmZpZzogZmFsc2UKCnRhcmdldDoKICBsb2tpOgogICAgY29uZmlnOgogICAgICBob3N0OiAiIgogICAgICBjZXJ0aWZpY2F0ZTogIiIKICAgICAgc2tpcFRMUzogZmFsc2UKICAgICAgcGF0aDogIiIKICAgIG5hbWU6IAogICAgc2VjcmV0UmVmOiAiIgogICAgbW91bnRlZFNlY3JldDogIiIKICAgIG1pbmltdW1TZXZlcml0eTogIiIKICAgIHNraXBFeGlzdGluZ09uU3RhcnR1cDogdHJ1ZQoKICBlbGFzdGljc2VhcmNoOgogICAgY29uZmlnOgogICAgICBob3N0OiAiIgogICAgICBjZXJ0aWZpY2F0ZTogIiIKICAgICAgc2tpcFRMUzogZmFsc2UKICAgICAgdXNlcm5hbWU6ICIiCiAgICAgIHBhc3N3b3JkOiAiIgogICAgICBhcGlLZXk6ICIiCiAgICAgIGluZGV4OiAicG9saWN5LXJlcG9ydGVyIgogICAgICByb3RhdGlvbjogImRhaWx5IgogICAgICB0eXBlbGVzc0FwaTogImZhbHNlIgogICAgbmFtZTogCiAgICBzZWNyZXRSZWY6ICIiCiAgICBtb3VudGVkU2VjcmV0OiAiIgogICAgbWluaW11bVNldmVyaXR5OiAiIgogICAgc2tpcEV4aXN0aW5nT25TdGFydHVwOiB0cnVlCgogIHNsYWNrOgogICAgY29uZmlnOgogICAgICB3ZWJob29rOiAiIgogICAgICBjaGFubmVsOiAiIgogICAgICBjZXJ0aWZpY2F0ZTogCiAgICAgIHNraXBUTFM6IAogICAgbmFtZTogCiAgICBzZWNyZXRSZWY6ICIiCiAgICBtb3VudGVkU2VjcmV0OiAiIgogICAgbWluaW11bVNldmVyaXR5OiAiIgogICAgc2tpcEV4aXN0aW5nT25TdGFydHVwOiB0cnVlCgogIGRpc2NvcmQ6CiAgICBjb25maWc6CiAgICAgIHdlYmhvb2s6ICIiCiAgICAgIGNlcnRpZmljYXRlOiAiIgogICAgICBza2lwVExTOiBmYWxzZQogICAgbmFtZTogCiAgICBzZWNyZXRSZWY6ICIiCiAgICBtb3VudGVkU2VjcmV0OiAiIgogICAgbWluaW11bVNldmVyaXR5OiAiIgogICAgc2tpcEV4aXN0aW5nT25TdGFydHVwOiB0cnVlCgogIHRlYW1zOgogICAgY29uZmlnOgogICAgICB3ZWJob29rOiAiIgogICAgICBjZXJ0aWZpY2F0ZTogIiIKICAgICAgc2tpcFRMUzogZmFsc2UKICAgIG5hbWU6IAogICAgc2VjcmV0UmVmOiAiIgogICAgbW91bnRlZFNlY3JldDogIiIKICAgIG1pbmltdW1TZXZlcml0eTogIiIKICAgIHNraXBFeGlzdGluZ09uU3RhcnR1cDogdHJ1ZQoKICB3ZWJob29rOgogICAgY29uZmlnOgogICAgICB3ZWJob29rOiAiIgogICAgICBjZXJ0aWZpY2F0ZTogIiIKICAgICAgc2tpcFRMUzogZmFsc2UKICAgICAga2VlcGFsaXZlOgogICAgICAgIGludGVydmFsOiAiMCIKICAgIG5hbWU6IAogICAgc2VjcmV0UmVmOiAiIgogICAgbW91bnRlZFNlY3JldDogIiIKICAgIG1pbmltdW1TZXZlcml0eTogIiIKICAgIHNraXBFeGlzdGluZ09uU3RhcnR1cDogdHJ1ZQoKICB0ZWxlZ3JhbToKICAgIGNvbmZpZzoKICAgICAgY2hhdElkOiAiIgogICAgICB0b2tlbjogIiIKICAgICAgd2ViaG9vazogCiAgICAgIGNlcnRpZmljYXRlOiAiIgogICAgICBza2lwVExTOiBmYWxzZQogICAgbmFtZTogCiAgICBzZWNyZXRSZWY6ICIiCiAgICBtb3VudGVkU2VjcmV0OiAiIgogICAgbWluaW11bVNldmVyaXR5OiAiIgogICAgc2tpcEV4aXN0aW5nT25TdGFydHVwOiB0cnVlCgogIGdvb2dsZUNoYXQ6CiAgICBjb25maWc6CiAgICAgIHdlYmhvb2s6ICIiCiAgICAgIGNlcnRpZmljYXRlOiAiIgogICAgICBza2lwVExTOiBmYWxzZQogICAgbmFtZTogCiAgICBzZWNyZXRSZWY6ICIiCiAgICBtb3VudGVkU2VjcmV0OiAiIgogICAgbWluaW11bVNldmVyaXR5OiAiIgogICAgc2tpcEV4aXN0aW5nT25TdGFydHVwOiB0cnVlCgogIGppcmE6CiAgICBjb25maWc6CiAgICAgIGhvc3Q6ICIiCiAgICAgIHVzZXJuYW1lOiAiIgogICAgICBwYXNzd29yZDogIiIKICAgICAgYXBpVG9rZW46ICIiCiAgICAgIGFwaVZlcnNpb246ICJ2MyIKICAgICAgc3VtbWFyeVRlbXBsYXRlOiAiIgogICAgICBwcm9qZWN0S2V5OiAiIgogICAgICBpc3N1ZVR5cGU6ICIiCiAgICAgIGNlcnRpZmljYXRlOiAiIgogICAgICBza2lwVExTOiBmYWxzZQogICAgbmFtZTogCiAgICBzZWNyZXRSZWY6ICIiCiAgICBtb3VudGVkU2VjcmV0OiAiIgogICAgbWluaW11bVNldmVyaXR5OiAiIgogICAgc2tpcEV4aXN0aW5nT25TdGFydHVwOiB0cnVlCgogIGFsZXJ0TWFuYWdlcjoKICAgIGNvbmZpZzoKICAgICAgaG9zdDogIiIKICAgICAgY2VydGlmaWNhdGU6ICIiCiAgICAgIHNraXBUTFM6IGZhbHNlCiAgICBuYW1lOiAKICAgIHNlY3JldFJlZjogIiIKICAgIG1vdW50ZWRTZWNyZXQ6ICIiCiAgICBtaW5pbXVtU2V2ZXJpdHk6ICIiCiAgICBza2lwRXhpc3RpbmdPblN0YXJ0dXA6IHRydWUKCiAgczM6CiAgICBjb25maWc6CiAgICAgIGFjY2Vzc0tleUlkOiAKICAgICAgc2VjcmV0QWNjZXNzS2V5OiAgCiAgICAgIHJlZ2lvbjogCiAgICAgIGVuZHBvaW50OiAKICAgICAgYnVja2V0OiAKICAgICAgYnVja2V0S2V5RW5hYmxlZDogZmFsc2UKICAgICAga21zS2V5SWQ6IAogICAgICBzZXJ2ZXJTaWRlRW5jcnlwdGlvbjogCiAgICAgIHBhdGhTdHlsZTogZmFsc2UKICAgICAgcHJlZml4OiAKICAgIG5hbWU6IAogICAgc2VjcmV0UmVmOiAiIgogICAgbW91bnRlZFNlY3JldDogIiIKICAgIG1pbmltdW1TZXZlcml0eTogIiIKICAgIHNraXBFeGlzdGluZ09uU3RhcnR1cDogdHJ1ZQoKICBraW5lc2lzOgogICAgY29uZmlnOgogICAgICBhY2Nlc3NLZXlJZDogCiAgICAgIHNlY3JldEFjY2Vzc0tleTogIAogICAgICByZWdpb246IAogICAgICBlbmRwb2ludDogCiAgICAgIHN0cmVhbU5hbWU6IAogICAgbmFtZTogCiAgICBzZWNyZXRSZWY6ICIiCiAgICBtb3VudGVkU2VjcmV0OiAiIgogICAgbWluaW11bVNldmVyaXR5OiAiIgogICAgc2tpcEV4aXN0aW5nT25TdGFydHVwOiB0cnVlCgogIHNlY3VyaXR5SHViOgogICAgY29uZmlnOgogICAgICBhY2Nlc3NLZXlJZDogIiIKICAgICAgc2VjcmV0QWNjZXNzS2V5OiAgIiIKICAgICAgcmVnaW9uOiAKICAgICAgZW5kcG9pbnQ6IAogICAgICBhY2NvdW50SWQ6ICIiCiAgICAgIHByb2R1Y3ROYW1lOiAKICAgICAgY29tcGFueU5hbWU6IAogICAgICBkZWxheUluU2Vjb25kczogMgogICAgICBzeW5jaHJvbml6ZTogdHJ1ZQogICAgbmFtZTogCiAgICBzZWNyZXRSZWY6ICIiCiAgICBtb3VudGVkU2VjcmV0OiAiIgogICAgbWluaW11bVNldmVyaXR5OiAiIgogICAgc2tpcEV4aXN0aW5nT25TdGFydHVwOiB0cnVlCgogIGdjczoKICAgIGNvbmZpZzoKICAgICAgY3JlZGVudGlhbHM6IAogICAgICBidWNrZXQ6IAogICAgICBwcmVmaXg6IAogICAgbmFtZTogCiAgICBzZWNyZXRSZWY6ICIiCiAgICBtb3VudGVkU2VjcmV0OiAiIgogICAgbWluaW11bVNldmVyaXR5OiAiIgogICAgc2tpcEV4aXN0aW5nT25TdGFydHVwOiB0cnVlCgp3b3JrZXI6IDUKbWV0cmljczoKICBjdXN0b21MYWJlbHM6IFtdCiAgZW5hYmxlZDogZmFsc2UKICBmaWx0ZXI6IHt9CiAgbW9kZTogZGV0YWlsZWQKc291cmNlRmlsdGVyczoKICAtIGRpc2FibGVDbHVzdGVyUmVwb3J0czogZmFsc2UKICAgIGtpbmRzOgogICAgICBleGNsdWRlOgogICAgICAtIFJlcGxpY2FTZXQKICAgIHNlbGVjdG9yOgogICAgICBzb3VyY2VzOgogICAgICAtIGt5dmVybm8KICAgICAgLSBLeXZlcm5vVmFsaWRhdGluZ1BvbGljeQogICAgICAtIEt5dmVybm9JbWFnZVZhbGlkYXRpbmdQb2xpY3kKICAgIHVuY29udHJvbGxlZE9ubHk6IHRydWUKCmxlYWRlckVsZWN0aW9uOgogIGVuYWJsZWQ6IGZhbHNlCiAgcmVsZWFzZU9uQ2FuY2VsOiB0cnVlCiAgbGVhc2VEdXJhdGlvbjogMTUKICByZW5ld0RlYWRsaW5lOiAxMAogIHJldHJ5UGVyaW9kOiAyCnJlZGlzOgogIGFkZHJlc3M6ICIiCiAgY2VydGlmaWNhdGU6ICIiCiAgY2xpZW50Q2VydDogIiIKICBjbGllbnRLZXk6ICIiCiAgZGF0YWJhc2U6IDAKICBlbmFibGVkOiBmYWxzZQogIHBhc3N3b3JkOiAiIgogIHByZWZpeDogcG9saWN5LXJlcG9ydGVyCiAgc2VjcmV0UmVmOiAiIgogIHNraXBUTFM6IGZhbHNlCiAgdXNlcm5hbWU6ICIiCgpsb2dnaW5nOgogIHNlcnZlcjogZmFsc2UKICBlbmNvZGluZzogY29uc29sZQogIGxvZ0xldmVsOiAwCgphcGk6CiAgYmFzaWNBdXRoOgogICAgdXNlcm5hbWU6IAogICAgcGFzc3dvcmQ6IAogICAgc2VjcmV0UmVmOiAKCmRhdGFiYXNlOgogIHR5cGU6IAogIGRhdGFiYXNlOiAKICB1c2VybmFtZTogCiAgcGFzc3dvcmQ6IAogIGhvc3Q6IAogIGVuYWJsZVNTTDogZmFsc2UKICBkc246IAogIG1heE9wZW5Db25uZWN0aW9uczogMjUKICBtYXhJZGxlQ29ubmVjdGlvbnM6IDI1CiAgY29ubmVjdGlvbk1heElkbGVUaW1lOiAwCiAgY29ubmVjdGlvbk1heExpZmV0aW1lOiAwCiAgdGltZW91dDogMTAKICBtZXRyaWNzOiBmYWxzZQogIHNlY3JldFJlZjogCiAgbW91bnRlZFNlY3JldDogCnBlcmlvZGljU3luYzoKICBlbmFibGVkOiBmYWxzZQogIGludGVydmFsOiAzMAo=
+  config.yaml: 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
 ---
 # Source: policy-reporter/templates/ui/config-secret.yaml
 apiVersion: v1
@@ -77,9 +77,9 @@
   labels:
     app.kubernetes.io/name: policy-reporter-ui
     app.kubernetes.io/instance: policy-reporter
-    app.kubernetes.io/version: "3.7.4"
+    app.kubernetes.io/version: "3.9.0"
     app.kubernetes.io/managed-by: Helm
-    helm.sh/chart: policy-reporter-3.7.4
+    helm.sh/chart: policy-reporter-3.9.1
 type: Opaque
 data:
   config.yaml: bG9nZ2luZzoKICBhcGk6IGZhbHNlCiAgc2VydmVyOiBmYWxzZQogIGVuY29kaW5nOiBjb25zb2xlCiAgbG9nTGV2ZWw6IDAKCnNlcnZlcjoKICBwb3J0OiA4MDgwCiAgY29yczogdHJ1ZQogIG92ZXJ3cml0ZUhvc3Q6IHRydWUKICBzZXNzaW9uczoKICAgIHN0b3JhZ2U6IGZpbGVzeXN0ZW0KICAgIHRlbXBEaXI6IC90bXAKCnVpOgogIGRpc3BsYXlNb2RlOiAKICBiYW5uZXI6IAogIGxvZ286CiAgICBwYXRoOiAKICAgIGRpc2FibGVkOiBmYWxzZQoKY3JkczoKICBjdXN0b21Cb2FyZDogZmFsc2UKCmNsdXN0ZXJzOgogIC0gbmFtZTogRGVmYXVsdAogICAgc2VjcmV0UmVmOiBwb2xpY3ktcmVwb3J0ZXItdWktZGVmYXVsdC1jbHVzdGVyCgpzb3VyY2VzOgogIC0gbmFtZToga3l2ZXJubwogICAgdHlwZTogcmVzdWx0CiAgICBleGNlcHRpb25zOiBmYWxzZQogICAgZXhjbHVkZXM6CiAgICAgIHJlc3VsdHM6CiAgICAgIC0gd2FybgogICAgICAtIGVycm9yCiAgLSBuYW1lOiBLeXZlcm5vVmFsaWRhdGluZ1BvbGljeQogICAgdHlwZTogcmVzdWx0CiAgICBleGNlcHRpb25zOiBmYWxzZQogICAgZXhjbHVkZXM6CiAgICAgIHJlc3VsdHM6CiAgICAgIC0gd2FybgogICAgICAtIGVycm9yCm9wZW5JRENvbm5lY3Q6CiAgICBjYWxsYmFja1VybDogIiIKICAgIGNlcnRpZmljYXRlOiAiIgogICAgY2xpZW50SWQ6ICIiCiAgICBjbGllbnRTZWNyZXQ6ICIiCiAgICBkaXNjb3ZlcnlVcmw6ICIiCiAgICBlbmFibGVkOiBmYWxzZQogICAgZ3JvdXBDbGFpbTogIiIKICAgIHNjb3BlczogW10KICAgIHNlY3JldFJlZjogIiIKICAgIHNraXBUTFM6IGZhbHNlCm9hdXRoOgogICAgY2FsbGJhY2tVcmw6ICIiCiAgICBjbGllbnRJZDogIiIKICAgIGNsaWVudFNlY3JldDogIiIKICAgIGVuYWJsZWQ6IGZhbHNlCiAgICBwcm92aWRlcjogIiIKICAgIHNjb3BlczogW10KICAgIHNlY3JldFJlZjogIiIK
@@ -92,11 +92,11 @@
     rbac.authorization.k8s.io/aggregate-to-admin: "true"
     app.kubernetes.io/name: policy-reporter
     app.kubernetes.io/instance: policy-reporter
-    app.kubernetes.io/version: "3.7.4"
+    app.kubernetes.io/version: "3.9.0"
     app.kubernetes.io/component: reporting
     app.kubernetes.io/part-of: policy-reporter
     app.kubernetes.io/managed-by: Helm
-    helm.sh/chart: policy-reporter-3.7.4
+    helm.sh/chart: policy-reporter-3.9.1
   name: policy-reporter
 rules:
 - apiGroups:
@@ -147,6 +147,12 @@
   - jobs
   verbs:
   - get
+- apiGroups:
+  - 'apps'
+  resources:
+  - replicasets
+  verbs:
+  - get
 ---
 # Source: policy-reporter/templates/clusterrolebinding.yaml
 apiVersion: rbac.authorization.k8s.io/v1
@@ -156,11 +162,11 @@
   labels:
     app.kubernetes.io/name: policy-reporter
     app.kubernetes.io/instance: policy-reporter
-    app.kubernetes.io/version: "3.7.4"
+    app.kubernetes.io/version: "3.9.0"
     app.kubernetes.io/component: reporting
     app.kubernetes.io/part-of: policy-reporter
     app.kubernetes.io/managed-by: Helm
-    helm.sh/chart: policy-reporter-3.7.4
+    helm.sh/chart: policy-reporter-3.9.1
 roleRef:
   kind: ClusterRole
   name: policy-reporter
@@ -177,11 +183,11 @@
   labels:
     app.kubernetes.io/name: policy-reporter
     app.kubernetes.io/instance: policy-reporter
-    app.kubernetes.io/version: "3.7.4"
+    app.kubernetes.io/version: "3.9.0"
     app.kubernetes.io/component: reporting
     app.kubernetes.io/part-of: policy-reporter
     app.kubernetes.io/managed-by: Helm
-    helm.sh/chart: policy-reporter-3.7.4
+    helm.sh/chart: policy-reporter-3.9.1
   name: policy-reporter-secret-reader
   namespace: kyverno
 rules:
@@ -200,9 +206,9 @@
   labels:
     app.kubernetes.io/name: policy-reporter-ui
     app.kubernetes.io/instance: policy-reporter
-    app.kubernetes.io/version: "3.7.4"
+    app.kubernetes.io/version: "3.9.0"
     app.kubernetes.io/managed-by: Helm
-    helm.sh/chart: policy-reporter-3.7.4
+    helm.sh/chart: policy-reporter-3.9.1
   name: policy-reporter-ui-secret-reader
   namespace: kyverno
 rules:
@@ -221,11 +227,11 @@
   labels:
     app.kubernetes.io/name: policy-reporter
     app.kubernetes.io/instance: policy-reporter
-    app.kubernetes.io/version: "3.7.4"
+    app.kubernetes.io/version: "3.9.0"
     app.kubernetes.io/component: reporting
     app.kubernetes.io/part-of: policy-reporter
     app.kubernetes.io/managed-by: Helm
-    helm.sh/chart: policy-reporter-3.7.4
+    helm.sh/chart: policy-reporter-3.9.1
 roleRef:
   kind: Role
   name: policy-reporter-secret-reader
@@ -244,9 +250,9 @@
   labels:
     app.kubernetes.io/name: policy-reporter-ui
     app.kubernetes.io/instance: policy-reporter
-    app.kubernetes.io/version: "3.7.4"
+    app.kubernetes.io/version: "3.9.0"
     app.kubernetes.io/managed-by: Helm
-    helm.sh/chart: policy-reporter-3.7.4
+    helm.sh/chart: policy-reporter-3.9.1
 roleRef:
   kind: Role
   name: policy-reporter-ui-secret-reader
@@ -265,11 +271,11 @@
   labels:
     app.kubernetes.io/name: policy-reporter
     app.kubernetes.io/instance: policy-reporter
-    app.kubernetes.io/version: "3.7.4"
+    app.kubernetes.io/version: "3.9.0"
     app.kubernetes.io/component: reporting
     app.kubernetes.io/part-of: policy-reporter
     app.kubernetes.io/managed-by: Helm
-    helm.sh/chart: policy-reporter-3.7.4
+    helm.sh/chart: policy-reporter-3.9.1
 spec:
   type: ClusterIP
   ports:
@@ -291,9 +297,9 @@
   labels:
     app.kubernetes.io/name: policy-reporter-ui
     app.kubernetes.io/instance: policy-reporter
-    app.kubernetes.io/version: "3.7.4"
+    app.kubernetes.io/version: "3.9.0"
     app.kubernetes.io/managed-by: Helm
-    helm.sh/chart: policy-reporter-3.7.4
+    helm.sh/chart: policy-reporter-3.9.1
 spec:
   type: ClusterIP
   ports:
@@ -315,11 +321,11 @@
... (truncated, diff exceeds 200 lines)

lunarys · 2026-07-31T13:03:18Z

Renovate Review: `policy-reporter` 3.7.4 → 3.9.1 (minor)

Risk: 🟡 MEDIUM

Check	Result
Inputs	✅ complete
Description vs. diff	✅ consistent
Rendered diff	⚠️ truncated (diff exceeds 200 lines)
Changelog vs. config	✅ checked, no overlap

Details:

v3.9.0 UI notes a security-positive change ("the policy reporter core api is no longer exposed via a proxy URI... all requests now go via the UI backend") — not breaking for this setup.
v3.9.0 UI also changes custom-board-filter behavior ("applying custom board filters in the backend... makes it impossible to remove") — checked 03_apps/apps/kyverno/policy-reporter-values.yaml/-prod/-test, which only configure ui.enabled/ui.ingress; no custom boards or filters are configured here, so this change doesn't apply.
Visible portion of the diff is label bumps plus one additive RBAC grant (replicasets: get, for the new replicaset-owner-check feature) — no error indicators.

Why medium: rendered diff is truncated, even though the changelog items that could plausibly matter were checked and don't intersect this repo's configuration.

Generated by Claude Code

chore(deps): update policy-reporter docker tag to v3.9.1

c77d289

lunarys merged commit 13c4f22 into main Jul 31, 2026
1 check passed

renovate Bot deleted the renovate/policy-reporter-3.x branch July 31, 2026 13:25

Navigation Menu

chore(deps): update policy-reporter docker tag to v3.9.1 - #154

chore(deps): update policy-reporter docker tag to v3.9.1#154
lunarys merged 1 commit into
mainfrom
renovate/policy-reporter-3.x

renovate Bot commented Jul 31, 2026

Uh oh!

github-actions Bot commented Jul 31, 2026

Uh oh!

lunarys commented Jul 31, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

renovate Bot commented Jul 31, 2026

Release Notes

v3.9.1

v3.9.0

Policy Reporter v3.9.0

Policy Reporter UI v2.7.0

Policy Reporter Kyverno Plugin v0.7.0

Policy Reporter Trivy Plugin v0.5.0

v3.8.1

Policy Reporter v3.8.1

Policy Reporter UI v2.6.1

Policy Reporter Trivy Plugin v0.4.15

Configuration

Uh oh!

github-actions Bot commented Jul 31, 2026

Helm Template Diff

policy-reporter — 3.7.4 → 3.9.1

Uh oh!

lunarys commented Jul 31, 2026

Renovate Review: policy-reporter 3.7.4 → 3.9.1 (minor)

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

`v3.9.1`

`v3.9.0`

`v3.8.1`

`policy-reporter` — `3.7.4` → `3.9.1`

Renovate Review: `policy-reporter` 3.7.4 → 3.9.1 (minor)