chore(deps): update dependency chart-testing to v3.15.0

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
chart-testing	uses-with	minor	3.14.0 → 3.15.0

---

Release Notes

helm/chart-testing (chart-testing)

v3.15.0

Compare Source

What's Changed

• build(deps): Bump the actions group across 1 directory with 4 updates by @​dependabot[bot] in #​784
• build(deps): Bump helm.sh/helm/v3 from 3.18.6 to 3.19.2 by @​dependabot[bot] in #​785
• build(deps): Bump the actions group across 1 directory with 2 updates by @​dependabot[bot] in #​793
• build(deps): Bump alpine from 3.22 to 3.23 in the docker group by @​dependabot[bot] in #​794
• build(deps): Bump github.com/spf13/cobra from 1.10.1 to 1.10.2 in the gomod group by @​dependabot[bot] in #​792
• build(deps): Bump actions/checkout from 5.0.1 to 6.0.1 by @​dependabot[bot] in #​797
• build(deps): Bump golangci/golangci-lint-action from 8.0.0 to 9.2.0 by @​dependabot[bot] in #​798
• build(deps): Bump helm.sh/helm/v3 from 3.19.2 to 3.19.4 in the gomod group by @​dependabot[bot] in #​795
• build(deps): Bump the actions group across 1 directory with 2 updates by @​dependabot[bot] in #​799
• build(deps): Bump the actions group across 1 directory with 2 updates by @​dependabot[bot] in #​802
• build(deps): Bump helm.sh/helm/v3 from 3.19.4 to 3.19.5 in the gomod group by @​dependabot[bot] in #​803
• build(deps): Bump the actions group with 2 updates by @​dependabot[bot] in #​805
• build(deps): Bump the actions group across 1 directory with 5 updates by @​dependabot[bot] in #​815
• build(deps): Bump helm.sh/helm/v3 from 3.19.5 to 3.20.1 by @​dependabot[bot] in #​823
• build(deps): Bump docker/setup-qemu-action from 3.7.0 to 4.0.0 by @​dependabot[bot] in #​820
• build(deps): Bump docker/login-action from 3.7.0 to 4.0.0 by @​dependabot[bot] in #​821
• build(deps): Bump docker/setup-buildx-action from 3.12.0 to 4.0.0 by @​dependabot[bot] in #​818
• build(deps): Bump anchore/sbom-action from 0.23.0 to 0.23.1 in the actions group by @​dependabot[bot] in #​817
• build(deps): Bump goreleaser/goreleaser-action from 6.4.0 to 7.0.0 by @​dependabot[bot] in #​822
• build(deps): Bump the actions group across 1 directory with 3 updates by @​dependabot[bot] in #​827
• build(deps): Bump goreleaser/goreleaser-action from 7.0.0 to 7.1.0 in the actions group by @​dependabot[bot] in #​831
• build(deps): Bump the gomod group with 2 updates by @​dependabot[bot] in #​830
• build(deps): Bump azure/setup-helm from 4.3.1 to 5.0.0 by @​dependabot[bot] in #​825
• build(deps): Bump goreleaser/goreleaser-action from 7.1.0 to 7.2.1 in the actions group by @​dependabot[bot] in #​832
• chore: bump to Go 1.26, harden release workflow, tidy code by @​cpanato in #​835
• build(deps): Bump helm.sh/helm/v3 from 3.20.2 to 3.21.0 by @​dependabot[bot] in #​836
• build(deps): Bump goreleaser/goreleaser-action from 7.2.1 to 7.2.2 in the actions group by @​dependabot[bot] in #​837
• build(deps): Bump the actions group across 1 directory with 6 updates by @​dependabot[bot] in #​840
• build(deps): Bump actions/checkout from 6.0.3 to 7.0.0 by @​dependabot[bot] in #​844
• build(deps): Bump the actions group across 1 directory with 7 updates by @​dependabot[bot] in #​846
• build(deps): Bump the actions group across 1 directory with 4 updates by @​dependabot[bot] in #​856
• build(deps): Bump actions/stale from 10.3.0 to 11.0.0 by @​dependabot[bot] in #​859
• build(deps): Bump github.com/mattn/go-shellwords from 1.0.13 to 1.0.14 in the gomod group across 1 directory by @​dependabot[bot] in #​860
• build(deps): Bump actions/setup-go from 6.5.0 to 7.0.0 by @​dependabot[bot] in #​858
• build(deps): Bump the actions group across 1 directory with 2 updates by @​dependabot[bot] in #​857
• build(deps): Bump alpine from 3.23 to 3.24 in the docker group across 1 directory by @​dependabot[bot] in #​843
• fix: honor --release-name instead of generating a random release name by @​somaz94 in #​841
• build(deps): Bump the actions group with 2 updates by @​dependabot[bot] in #​865
• build(deps): Bump helm.sh/helm/v3 from 3.21.0 to 3.22.0 by @​dependabot[bot] in #​864
• build(deps): Bump github.com/mattn/go-shellwords from 1.0.14 to 1.0.15 in the gomod group by @​dependabot[bot] in #​862
• build(deps): Bump anchore/sbom-action/download-syft from 0.24.2 to 0.24.3 in the actions group by @​dependabot[bot] in #​867
• build(deps): Bump github.com/mattn/go-shellwords from 1.0.15 to 1.0.16 in the gomod group by @​dependabot[bot] in #​866
• updates to prepare for release by @​cpanato in #​868

New Contributors

• @​somaz94 made their first contribution in #​841

Full Changelog: helm/chart-testing@v3.14.0...v3.15.0

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[kernelb00t]

Review: not mergeable as is. Lint fails at the helm/chart-testing-action install step with Error: error during PEM decoding.

Root cause: chart-testing v3.15.0 changed its release signing. The release only publishes a *.tar.gz.sigstore.json bundle (the .pem / .sig files return 404), while ct.sh in every chart-testing-action release (v2.8.0 and current main included) still runs cosign verify-blob --certificate …pem --signature …sig. Nothing in this repo can fix it, short of turning off signature verification (verify_blob: false, which isn't released yet and would weaken supply-chain checks).

Staying on 3.14.0 until chart-testing-action supports the sigstore bundle. Closing this. Renovate will propose the next chart-testing version, and that can be merged once the action catches up.

---

Generated by Claude Code

[renovate]

Renovate Ignore Notification

Because you closed this PR without merging, Renovate will ignore this update (3.15.0). You will get a PR once a newer version is released. To ignore this dependency forever, add it to the ignoreDeps array of your Renovate config.

If you accidentally closed this PR, or if you changed your mind: rename this PR to get a fresh replacement PR.