chore(deps): update dependency argoproj/argo-rollouts to v1.9.0

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
argoproj/argo-rollouts	Kustomization	minor	v1.8.4 → v1.9.0

---

Release Notes

argoproj/argo-rollouts (argoproj/argo-rollouts)

v1.9.0

Compare Source

Build

• tmate.io is no longer active (#​4417)

Chore

• Change enhancement proposal issue wording (#​4414)
• security fix https://nvd.nist.gov/vuln/detail/CVE-2023-46402 (#​4083)
• Make sure rollouts abort always has some more detailed message (#​3957) (#​4175)
• bump k8s libraries and go to current supported versions (#​4497)
• use internal errors util instead of pkg's (#​4171)
• Add Verkada to the list of users (#​4176)
• Add Doubble to official USERS.md (#​4214)
• Fix Traefik name (#​4217)
• enrich controller startup log with namespace, ports, and insta… (#​4218)
• Improve logging (#​4266)
• add canaryStepString route msg (#​4490)
• fix deprecation (pointer -> ptr) (#​4286)
• Adding Red Hat to the list (#​4361)
• make api-proto to support go module style (#​4402)
• Add UiPath to the list of users (#​4476)
• deps: bump codecov/codecov-action from 5.3.1 to 5.4.0 (#​4157)
• deps: bump github.com/aws/smithy-go from 1.22.2 to 1.22.3 (#​4136)
• deps: bump amannn/action-semantic-pull-request from 5 to 6 (#​4454)
• deps: bump sigstore/cosign-installer from 3.8.2 to 3.10.0 (#​4448)
• deps: bump docker/login-action from 3.4.0 to 3.6.0 (#​4473)
• deps: bump actions/download-artifact from 4.3.0 to 6.0.0 (#​4512)
• deps: bump github.com/aws/smithy-go from 1.22.4 to 1.23.1 (#​4494)
• deps: bump github.com/aws/aws-sdk-go-v2/service/cloudwatch from 1.45.1 to 1.45.4 (#​4366)
• deps: bump golang.org/x/sync from 0.11.0 to 0.16.0 (#​4353)
• deps: bump docker/setup-buildx-action from 3.10.0 to 3.11.1 (#​4328)
• deps: bump github.com/aws/aws-sdk-go-v2/service/cloudwatch from 1.44.1 to 1.45.1 (#​4313)
• deps: bump codecov/codecov-action from 5.4.2 to 5.4.3 (#​4283)
• deps: bump docker/build-push-action from 6.16.0 to 6.18.0 (#​4298)
• deps: bump actions/stale from 9 to 10 (#​4493)
• deps: bump codecov/codecov-action from 5.4.3 to 5.5.1 (#​4492)
• deps: bump softprops/action-gh-release from 2.2.1 to 2.2.2 (#​4243)
• deps: bump actions/download-artifact from 4.2.1 to 4.3.0 (#​4254)
• deps: bump docker/build-push-action from 6.15.0 to 6.16.0 (#​4255)
• deps: bump github.com/aws/aws-sdk-go-v2/config from 1.29.8 to 1.29.14 (#​4230)
• deps: bump codecov/codecov-action from 5.4.0 to 5.4.2 (#​4237)
• deps: bump sigstore/cosign-installer from 3.8.1 to 3.8.2 (#​4247)
• deps: bump github.com/golang-jwt/jwt to 4.5.2 (#​4235) (#​4236)
• deps: bump google.golang.org/grpc from 1.70.0 to 1.71.1 (#​4227)
• deps: bump golangci-lang from v1.61.0 to v1.64.8 (#​4213)
• deps: bump softprops/action-gh-release from 2.1.0 to 2.2.0 (#​3999)
• deps: bump golang.org/x/oauth2 from 0.26.0 to 0.29.0 (#​4219)
• deps: bump actions/checkout from 4 to 5 (#​4518)
• deps: bump actions/upload-artifact from 4 to 5 (#​4519)
• deps: bump actions/setup-go from 5.3.0 to 5.4.0 (#​4197)
• deps: bump actions/download-artifact from 4.2.0 to 4.2.1 (#​4198)
• deps: bump docker/login-action from 3.3.0 to 3.4.0 (#​4191)
• deps: bump actions/download-artifact from 4.1.9 to 4.2.0 (#​4194)
• deps: Updated go version in go.mod file (#​4182)
• deps: bump github.com/aws/aws-sdk-go-v2/service/cloudwatch from 1.44.0 to 1.44.1 (#​4172)
• deps: bump github/codeql-action from 3 to 4 (#​4517)
• deps: bump github.com/stretchr/testify from 1.10.0 to 1.11.1 (#​4516)
• deps: bump slsa-framework/slsa-github-generator from 2.0.0 to 2.1.0 (#​4152)
• deps: bump docker/setup-buildx-action from 3.9.0 to 3.10.0 (#​4167)
• deps: bump github.com/aws/aws-sdk-go-v2/service/cloudwatch from 1.43.15 to 1.44.0 (#​4169)
• deps: bump github.com/newrelic/newrelic-client-go/v2 from 2.53.0 to 2.54.0 (#​4150)
• deps: bump actions/download-artifact from 4.1.8 to 4.1.9 (#​4154)
• deps: bump actions/setup-go from 5.4.0 to 6.0.0 (#​4436)
• deps: bump docker/build-push-action from 6.14.0 to 6.15.0 (#​4158)
• deps: bump github.com/aws/aws-sdk-go-v2/config from 1.29.6 to 1.29.8 (#​4160)
• deps: bump docker/setup-qemu-action from 3.4.0 to 3.6.0 (#​4165)
• deps: bump docker/build-push-action from 6.13.0 to 6.14.0 (#​4141)
• deps: bump github.com/aws/aws-sdk-go-v2/service/cloudwatch from 1.43.14 to 1.43.15 (#​4144)
• deps: bump sigstore/cosign-installer from 3.8.0 to 3.8.1 (#​4146)
• deps: bump github.com/spf13/cobra from 1.8.1 to 1.9.1 (#​4135)
• deps: bump softprops/action-gh-release from 2.2.2 to 2.4.1 (#​4489)
• deps: bump golang.org/x/sync from 0.10.0 to 0.11.0 (#​4132)
• deps: bump docker/setup-qemu-action from 3.3.0 to 3.4.0 (#​4120)
• deps: bump github.com/newrelic/newrelic-client-go/v2 from 2.52.0 to 2.53.0 (#​4102)
• deps: bump google.golang.org/protobuf from 1.36.4 to 1.36.5 (#​4119)
• deps: bump docker/setup-buildx-action from 3.8.0 to 3.9.0 (#​4121)
• deps: bump github.com/aws/aws-sdk-go-v2/service/cloudwatch from 1.43.12 to 1.43.14 (#​4115)
• deps: bump golang.org/x/oauth2 from 0.25.0 to 0.26.0 (#​4108)
• deps: bump github.com/aws/aws-sdk-go-v2/config from 1.29.4 to 1.29.6 (#​4116)
• deps: bump sigstore/cosign-installer from 3.7.0 to 3.8.0 (#​4105)
• deps: bump github.com/aws/aws-sdk-go-v2/config from 1.29.3 to 1.29.4 (#​4098)
• deps: bump github.com/aws/aws-sdk-go-v2/service/cloudwatch from 1.43.11 to 1.43.12 (#​4099)
• deps: bump github.com/aws/aws-sdk-go-v2 from 1.35.0 to 1.36.0 (#​4100)
• deps: bump github.com/aws/aws-sdk-go-v2/service/cloudwatch from 1.43.10 to 1.43.11 (#​4091)
• deps: bump github.com/aws/aws-sdk-go-v2/config from 1.29.2 to 1.29.3 (#​4092)
• deps: bump github.com/evanphx/json-patch/v5 from 5.9.10 to 5.9.11 (#​4085)
• deps: bump google.golang.org/grpc from 1.69.4 to 1.70.0 (#​4086)
• deps: bump github.com/evanphx/json-patch/v5 from 5.9.0 to 5.9.10 (#​4080)
• deps: bump github.com/hashicorp/go-plugin from 1.6.2 to 1.6.3 (#​4081)
• deps: bump google.golang.org/protobuf from 1.36.3 to 1.36.4 (#​4082)
• deps: bump sigstore/cosign-installer from 3.10.0 to 4.0.0 (#​4522)
• deps: fix go list -m all show unknown revision v0.0.0 (#​4071)
• deps: bump github.com/aws/aws-sdk-go-v2/config from 1.29.0 to 1.29.2 (#​4077)
• deps: bump docker/build-push-action from 6.12.0 to 6.13.0 (#​4076)
• deps: bump actions/setup-go from 5.2.0 to 5.3.0 (#​4066)
• deps: bump codecov/codecov-action from 5.1.2 to 5.3.1 (#​4075)
• deps: bump github.com/aws/aws-sdk-go-v2/service/cloudwatch from 1.43.8 to 1.43.10 (#​4078)
• deps: bump google.golang.org/protobuf from 1.36.2 to 1.36.3 (#​4057)
• deps: bump docker/build-push-action from 6.10.0 to 6.12.0 (#​4050)
• deps: bump docker/setup-qemu-action from 3.2.0 to 3.3.0 (#​4034)
• deps: bump google.golang.org/grpc from 1.69.2 to 1.69.4 (#​4045)
• deps: bump github.com/aws/aws-sdk-go-v2/service/cloudwatch from 1.43.6 to 1.43.8 (#​4051)
• deps: bump github.com/aws/aws-sdk-go-v2/config from 1.28.10 to 1.29.0 (#​4053)
• deps: bump github.com/aws/aws-sdk-go-v2/service/cloudwatch from 1.43.4 to 1.43.6 (#​4039)
• deps: bump github.com/newrelic/newrelic-client-go/v2 from 2.51.3 to 2.52.0 (#​4031)
• deps: bump github.com/aws/aws-sdk-go-v2/config from 1.28.7 to 1.28.10 (#​4043)
• deps: bump github.com/aws/aws-sdk-go-v2 from 1.32.7 to 1.32.8 (#​4041)
• deps: bump golang.org/x/oauth2 from 0.24.0 to 0.25.0 (#​4027)
• deps: bump softprops/action-gh-release from 2.2.0 to 2.2.1 (#​4028)
• deps: bump google.golang.org/protobuf from 1.36.0 to 1.36.2 (#​4029)
• deps: bump github.com/aws/aws-sdk-go-v2/config from 1.28.6 to 1.28.7 (#​4019)
• deps: bump google.golang.org/grpc from 1.69.0 to 1.69.2 (#​4015)
• deps: bump codecov/codecov-action from 5.1.1 to 5.1.2 (#​4014)
• deps: bump github.com/aws/aws-sdk-go-v2/service/cloudwatch from 1.43.3 to 1.43.4 (#​4020)
• deps: bump google.golang.org/protobuf from 1.35.2 to 1.36.0 (#​4007)
• deps: bump docker/setup-buildx-action from 3.7.1 to 3.8.0 (#​4006)
• deps: bump actions/setup-go from 5.1.0 to 5.2.0 (#​4000)
• deps: bump google.golang.org/grpc from 1.68.1 to 1.69.0 (#​4001)
• example: Remove likely AI generated text (#​4419)

Ci

• bump golangci-lint to v2 (#​4290)

Docs

• Update USERS.md - adding Schneider Electric (#​4272)
• new syntax for docs conf (#​4012)
• fix typos and formatting (#​4498)
• Fix typos and linguistic errors in documentation / hacktoberfest (#​4483)
• Add properties usage for Blue/Green and Canary Rollouts with HPA (#​4451)
• fix broken link (#​4289)
• clarify traffic routing, especially for ALB ping-pong (#​4527)
• add batumbu to USERS.md (#​4389)
• fix indentation in Rollout YAML (#​4354)
• proposal for parameterized build system (#​4331)
• fix traffic manager note (#​4311)
• Update Changelog (#​4306)
• fix links in canary docs to other docs (#​4303)
• explain skew policy between the kubectl plugin and the controller (#​4300)
• Update Changelog (#​3992)
• adding more information about flag to document (#​4240) (#​4280)
• Correcting typo in best-practices.md (#​4418)
• Added Yuno to the USERS.md (#​4262)
• Fix traffic management link from features/canary page (#​4269)
• mention existing test suite names (#​4267)
• blue green w/ ALB not supported without downtime (#​4259)
• Update Changelog (#​4202)
• Update Changelog (#​4199)
• Improve the Istio documentation and some grammar tweaks. Fixes #​4163 (#​4164)
• Update USERS.md (#​4162)
• fix markdown rendering (#​4109)
• Update Changelog (#​4088)
• Update Changelog (#​4056)
• mention the Kubernetes Downward API in the ephemeral metadata documentation page (#​4025)
• analysis: Update analysis docs on valueFrom arg support (#​4509)
• analysis: add docs for consecutiveSuccessLimit (#​3996)
• example: Fix broken links in docs. Fixes #​4382 (#​4403)

Feat

• set start and end time for analysis in Kayenta metric provider (#​4464)
• exposed scaleDownDelaySeconds field in experiments created via rollouts (#​4388)
• The /api mux server should respect the --root-path arg. (#​4430)
• added available replica pods threshold (#​4341)
• reconcile pod ephemeral metadata in parallel (#​4130)
• dashboard: Show API failure notification on dashboard. Fixes #​4079 (#​4468)
• dashboard: add error handling notifications for rollout actions (#​4345)

Fix

• abort scenario where canary/stable service is not provided (#​4299)
• don't over reconcile on error (#​4005)
• Upgrade go-retryablehttp to v0.7.7 (#​3743)
• update main command description for retry (#​4301)
• remove ReplicaSet write-back (#​4044)
• correct typo in linter settings key name (#​4094)
• allow full promotion when replica progress threshold is met (#​4480)
• check ephemeral metadata is set before delete (#​4089)
• region mapping in Kayenta metric provider (#​4465)
• proto codegen was not properly working (#​4482)
• redo PR 3639 (#​4114)
• add configurable subset level DestinationRules (#​4332)
• correct typo (#​4375)
• nil pointer on logging (#​4127)
• loop when paused and completed (#​4134)
• guardrail to not overload stable replicaset (#​3878)
• Revert "fix(controller): rollout stuck in Progressing. fixes #​3988" (#​4201)
• restarts during updates could cause downtime (#​4221)
• truncate analysis job name if needed (#​4305)
• experiment services deletion before reconciling traffic routing in rollouts (#​4310)
• code weakness of path traversal (#​4278)
• remove preserveUnknownFields to avoid OutOfSync in ArgoCD. Fixes #​1272 (#​4277)
• follow the kustomize directory structure changes for link (#​4224)
• AnalysisRunMetadata should be a pointer to avoid empty bracket creations in k8s (#​4446)
• analysis: prevent promotion on inconclusive background run. Fixes: #​3850 (#​3873)
• cli: expose AWS API versions in controller CLI. Fixes #​4334 (#​4368)
• cli: Add generation to RolloutInfo (#​4336)
• cli: update incorrect boolean flag syntax example in cli help output. Fixes #​4112 (#​4355)
• cli: Include unpause patch in promote full patch. Fixes #​4265 (#​4412)
• controller: Fix a bug where failure to update pod Metadata cascades to all other pods (#​4258)
• controller: Fixed broken pprof links #​4037 (#​4038)
• controller: support simultaneous ALB and NGINX traffic routing validation (#​4460)
• controller: rollout stuck in Progressing. fixes #​3988 (#​4072)
• controller: add backward compatibility for --metricsport flag (#​4457)
• controller: don't panic if workload ref is not found (#​4208)
• controller: scaling of Deployment after migration to Rollout with workloadRef scaleDown:progressively (#​4322)
• dashboard: fix container image input (#​4274)
• dashboard: fix issue where rollout step in ui is blank when setWeight is 0 (#​4521)
• dashboard: Revert react-scripts upgrade due to performance regression. Fixes #​4122 (#​4166)
• deps: bumping k8s modules to 0.30.14 fixes #​4210 Rollout CRD and mitigates #​4180 (#​4212)
• experiments: propagate rolouts labels to experiments and replicasets (#​4118)
• experiments: fire rollout event on experiment step (#​4124)
• experiments: move recorder event to after experiment reconciliation, fixes #​4021 (#​4022)
• metricprovider: not require address in kubernetes secret for Datadog. Fixes #​4103 (#​4145)
• trafficrouting: Fix rollback behavior for canary with trafficrouting and .DynamicStableScale=true (#​4035)
• trafficrouting: patch VirtualService when there is only one named route (#​4055)

Fix!

• subresource scale selector changed for traffic routed canary (#​4074)
• make .spec.selector immutable (#​4084)

Refactor

• controller: context refactor (#​4291)

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.