🌱 Update Builder Image group

[cluster-stack-bot]

This PR contains the following updates:

Package	Type	Update	Change
adrienverge/yamllint		minor	v1.37.1 → v1.38.0
docker.io/library/alpine	stage	patch	3.23.0 → 3.23.2
golangci/golangci-lint		minor	v2.7.2 → v2.8.0

---

Release Notes

adrienverge/yamllint (adrienverge/yamllint)

v1.38.0

Compare Source

golangci/golangci-lint (golangci/golangci-lint)

v2.8.0

Compare Source

Released on 2026-01-07

1. Linters new features or changes
   • godoc-lint: from 0.10.2 to 0.11.1 (new rule: require-stdlib-doclink)
   • golines: from 442fd00 to 0.14.0
   • gomoddirectives: from 0.7.1 to 0.8.0
   • gosec: from daccba6 to 2.22.11 (new rule: G116)
   • modernize: from 0.39.0 to 0.40.0 (new analyzers: stringscut, unsafefuncs)
   • prealloc: from 1.0.0 to 1.0.1 (message changes)
   • unqueryvet: from 1.3.0 to 1.4.0 (new options: check-aliased-wildcard, check-string-concat, check-format-strings, check-string-builder, check-subqueries, ignored-functions, sql-builders)
2. Linters bug fixes
   • go-critic: from 0.14.2 to 0.14.3
   • go-errorlint: from 1.8.0 to 1.9.0
   • govet: from 0.39.0 to 0.40.0
   • protogetter: from 0.3.17 to 0.3.18
   • revive: add missing enable-default-rules setting
3. Documentation
   • docs: split installation page

---

Configuration

📅 Schedule: Branch creation - "on the first day of the month" in timezone Europe/Berlin, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

[cluster-stack-bot]

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

• any of the package files in this branch needs updating, or
• the branch becomes conflicted, or
• you click the rebase/retry checkbox if found above, or
• you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: undefined

Command failed: /bin/sh -c BUILD_IMAGE_TOKEN=**redacted** BUILD_IMAGE_USER=janiskemper CI=true ./hack/upgrade-builder-image.sh
+ git diff --exit-code .builder-image-version.txt images/builder/Dockerfile images/builder/build.sh
+ '[' true = true ']'
+ echo **redacted**
+ docker login ghcr.io -u janiskemper --password-stdin

WARNING! Your credentials are stored unencrypted in '/home/ubuntu/.docker/config.json'.
Configure a credential helper to remove this warning. See
https://docs.docker.com/go/credential-store/

++ git fetch --quiet origin main
++ git show origin/main:.builder-image-version.txt
+ VERSION=0.2.3
+ '[' -z 0.2.3 ']'
+ export VERSION
++ semver_upgrade patch 0.2.3
++ IFS=.
++ read -r version minor patch
++ case "$1" in
++ tag=0.2.4
++ echo 0.2.4
+ NEW_VERSION=0.2.4
+ export NEW_VERSION
+ docker manifest inspect ghcr.io/sovereigncloudstack/csctl-builder:0.2.3
+ echo 0.2.4
+ echo 'Wrote new version 0.2.4 to .builder-image-version.txt'
+ docker manifest inspect ghcr.io/sovereigncloudstack/csctl-builder:0.2.4
+ echo 0
+ sed -i -e '/^BUILDER_IMAGE_VERSION /s/:=.*$/:= 0.2.4/' Makefile
+ grep -r -E 'ghcr.io/sovereigncloudstack/csctl-builder:[0-9].*.*' -l
+ xargs sed -i -e 's/ghcr.io\/sovereigncloudstack\/csctl-builder:0.2.3/ghcr.io\/sovereigncloudstack\/csctl-builder:0.2.4/g'
+ docker build -t ghcr.io/sovereigncloudstack/csctl-builder:0.2.4 ./images/builder
DEPRECATED: The legacy builder is deprecated and will be removed in a future release.
            Install the buildx component to build images with BuildKit:
            https://docs.docker.com/go/buildx/

The command '/bin/sh -c apt-get update &&   apt-get install -qy --no-install-recommends   gnupg python3 python3-pip   file zip unzip jq gettext   skopeo=${SKOPEO_VERSION}   protobuf-compiler libprotobuf-dev   libsystemd-dev jq &&   rm -rf /var/lib/apt/lists/* /tmp/* /var/tmp/* &&   pip install --no-cache-dir   yamllint==${YAMLLINT_VERSION}   yamlfixer-opt-nc==${YAMLFIXER_VERSION}' returned a non-zero code: 1