fix(deps): update non-minor dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence	Type	Update
github.com/sap/component-operator-runtime	v0.3.126 → v0.3.127			require	patch
github.com/sap/go-generics	v0.2.47 → v0.2.48			require	patch
sigs.k8s.io/controller-runtime/tools/setup-envtest	157e6d2 → 0c3a910			require	digest

---

Release Notes

sap/component-operator-runtime (github.com/sap/component-operator-runtime)

v0.3.127

Compare Source

Fixes/Enhancements

• Clear finalizers when orphaning: the framework protects certain dependent objects (i.e. CustomResourceDefinition and APIService) by adding an own finalizer. Now if such a dependent object is orphaned (e.g. through the delete-policy: orphan annotation), then this finalizer should be removed. Note that this situation might also occur if we render a Helm chart (by HelmGenerator) using helm.sh/resource-policy: keep. This is fixed by this release: from now on, when orphaning objects, our finalizer is cleared from the protected objects.

• Allow to suppress events on dependents: in some cases, the framework does not have permission to create events on the target (e.g. if a kubeconfig or impersonation is used). Now, by setting the annotation

  <operator name>/disable-events: "true"

  on the component, emitting events can be suppressed. In a later phase, we might formalize this annotation into a Configuration interface.

• Enhance scaffolded Helm chart: the chart generated by scaffold now has options to tweak the containedPodDisruptionBudget.

sap/go-generics (github.com/sap/go-generics)

v0.2.48

Compare Source

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

ℹ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 14 additional dependencies were updated

Details:

Package	Change
github.com/spf13/cobra	v1.10.1 -> v1.10.2
go.yaml.in/yaml/v2	v2.4.2 -> v2.4.3
golang.org/x/mod	v0.27.0 -> v0.28.0
golang.org/x/sync	v0.16.0 -> v0.17.0
golang.org/x/sys	v0.35.0 -> v0.37.0
golang.org/x/text	v0.28.0 -> v0.29.0
gopkg.in/evanphx/json-patch.v4	v4.12.0 -> v4.13.0
k8s.io/api	v0.34.1 -> v0.34.2
k8s.io/kube-openapi	v0.0.0-20250710124328-f3f2b991d03b -> v0.0.0-20250910181357-589584f1c912
k8s.io/utils	v0.0.0-20250604170112-4c0f3b243397 -> v0.0.0-20251002143259-bc988d571ff4
sigs.k8s.io/json	v0.0.0-20241014173422-cfa47c3a1cc8 -> v0.0.0-20250730193827-2d320260d730
sigs.k8s.io/kustomize/api	v0.20.1 -> v0.21.0
sigs.k8s.io/kustomize/kyaml	v0.20.1 -> v0.21.0
sigs.k8s.io/structured-merge-diff/v6	v6.3.0 -> v6.3.1

[renovate]

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 14 additional dependencies were updated

Details:

Package	Change
k8s.io/apimachinery	v0.34.2 -> v0.35.0
go.yaml.in/yaml/v2	v2.4.2 -> v2.4.3
golang.org/x/crypto	v0.41.0 -> v0.44.0
golang.org/x/mod	v0.27.0 -> v0.29.0
golang.org/x/net	v0.43.0 -> v0.47.0
golang.org/x/sync	v0.16.0 -> v0.18.0
golang.org/x/sys	v0.35.0 -> v0.38.0
golang.org/x/term	v0.34.0 -> v0.37.0
golang.org/x/text	v0.28.0 -> v0.31.0
golang.org/x/tools	v0.36.0 -> v0.38.0
gopkg.in/evanphx/json-patch.v4	v4.12.0 -> v4.13.0
k8s.io/kube-openapi	v0.0.0-20250710124328-f3f2b991d03b -> v0.0.0-20250910181357-589584f1c912
k8s.io/utils	v0.0.0-20250604170112-4c0f3b243397 -> v0.0.0-20251002143259-bc988d571ff4
sigs.k8s.io/json	v0.0.0-20241014173422-cfa47c3a1cc8 -> v0.0.0-20250730193827-2d320260d730