From bc55524384c87e408c43e18d8a25bc4a4b738cc6 Mon Sep 17 00:00:00 2001
From: Oliver Gould <ver@buoyant.io>
Date: Mon, 2 Dec 2024 18:28:11 +0000
Subject: [PATCH 01/23] build(deps): update docker.io/library/golang from 1.22
 to 1.23

---
 Dockerfile                  | 24 ++++++++++++------------
 actions/setup-go/action.yml |  2 +-
 2 files changed, 13 insertions(+), 13 deletions(-)

diff --git a/Dockerfile b/Dockerfile
index 9ca2c08..1f03fb0 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -193,38 +193,38 @@ COPY --link bin/just-cargo /bin/
 ## Go tools
 ##
 
-FROM docker.io/library/golang:1.22 as go-delve
+FROM docker.io/library/golang:1.23 as go-delve
 RUN go install github.com/go-delve/delve/cmd/dlv@latest
 
-FROM docker.io/library/golang:1.22 as go-impl
+FROM docker.io/library/golang:1.23 as go-impl
 RUN go install github.com/josharian/impl@latest
 
-FROM docker.io/library/golang:1.22 as go-outline
+FROM docker.io/library/golang:1.23 as go-outline
 RUN go install github.com/ramya-rao-a/go-outline@latest
 
-FROM docker.io/library/golang:1.22 as go-protoc
+FROM docker.io/library/golang:1.23 as go-protoc
 RUN go install google.golang.org/protobuf/cmd/protoc-gen-go@v1.28.1
 RUN go install google.golang.org/grpc/cmd/protoc-gen-go-grpc@v1.2
 
-FROM docker.io/library/golang:1.22 as golangci-lint
+FROM docker.io/library/golang:1.23 as golangci-lint
 RUN go install github.com/golangci/golangci-lint/cmd/golangci-lint@latest
 
-FROM docker.io/library/golang:1.22 as gomodifytags
+FROM docker.io/library/golang:1.23 as gomodifytags
 RUN go install github.com/fatih/gomodifytags@latest
 
-FROM docker.io/library/golang:1.22 as gopkgs
+FROM docker.io/library/golang:1.23 as gopkgs
 RUN go install github.com/uudashr/gopkgs/v2/cmd/gopkgs@latest
 
-FROM docker.io/library/golang:1.22 as goplay
+FROM docker.io/library/golang:1.23 as goplay
 RUN go install github.com/haya14busa/goplay/cmd/goplay@latest
 
-FROM docker.io/library/golang:1.22 as gopls
+FROM docker.io/library/golang:1.23 as gopls
 RUN go install golang.org/x/tools/gopls@latest
 
-FROM docker.io/library/golang:1.22 as gotests
+FROM docker.io/library/golang:1.23 as gotests
 RUN go install github.com/cweill/gotests/gotests@latest
 
-FROM docker.io/library/golang:1.22 as gotestsum
+FROM docker.io/library/golang:1.23 as gotestsum
 RUN go install gotest.tools/gotestsum@v0.4.2
 
 FROM scratch as tools-go
@@ -263,7 +263,7 @@ COPY --link --from=tools-script /bin/* /bin/
 ##
 
 # A Go build environment.
-FROM docker.io/library/golang:1.22 as go
+FROM docker.io/library/golang:1.23 as go
 RUN --mount=type=cache,from=apt-base,source=/etc/apt,target=/etc/apt,ro \
     --mount=type=cache,from=apt-base,source=/var/cache/apt,target=/var/cache/apt,sharing=locked \
     --mount=type=cache,from=apt-base,source=/var/lib/apt/lists,target=/var/lib/apt/lists,sharing=locked \
diff --git a/actions/setup-go/action.yml b/actions/setup-go/action.yml
index 8727e69..ead2e16 100644
--- a/actions/setup-go/action.yml
+++ b/actions/setup-go/action.yml
@@ -5,7 +5,7 @@ inputs:
   # TODO(ver): CI should validate at this version matches that in the Dockerfile
   version:
     description: Go version
-    default: 1.22
+    default: 1.23
 
 runs:
   using: composite

From 861dc8de5a0147d7830f81edf4509c0377a60f92 Mon Sep 17 00:00:00 2001
From: Oliver Gould <ver@buoyant.io>
Date: Mon, 2 Dec 2024 19:06:55 +0000
Subject: [PATCH 02/23] build(deps): update gotestsum from 0.4.2 to 1.12.0

---
 Dockerfile | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/Dockerfile b/Dockerfile
index 1f03fb0..8c6018d 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -225,7 +225,8 @@ FROM docker.io/library/golang:1.23 as gotests
 RUN go install github.com/cweill/gotests/gotests@latest
 
 FROM docker.io/library/golang:1.23 as gotestsum
-RUN go install gotest.tools/gotestsum@v0.4.2
+ARG GOTESTSUM_VERSION=v1.12.0
+RUN go install gotest.tools/gotestsum@${GOTESTSUM_VERSION}
 
 FROM scratch as tools-go
 COPY --link --from=go-delve /go/bin/dlv /bin/

From 0b00cf2908deb14f3012f02058656395216f74bb Mon Sep 17 00:00:00 2001
From: Oliver Gould <ver@buoyant.io>
Date: Mon, 2 Dec 2024 19:46:44 +0000
Subject: [PATCH 03/23] build(deps): update protoc-gen-go from 1.28.1 to 1.35.2

---
 Dockerfile | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/Dockerfile b/Dockerfile
index 8c6018d..e393e9c 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -203,8 +203,10 @@ FROM docker.io/library/golang:1.23 as go-outline
 RUN go install github.com/ramya-rao-a/go-outline@latest
 
 FROM docker.io/library/golang:1.23 as go-protoc
-RUN go install google.golang.org/protobuf/cmd/protoc-gen-go@v1.28.1
-RUN go install google.golang.org/grpc/cmd/protoc-gen-go-grpc@v1.2
+ARG PROTOC_GEN_GO_VERSION=v1.35.2
+ARG PROTOC_GEN_GO_GRPC_VERSION=v1.2
+RUN go install google.golang.org/protobuf/cmd/protoc-gen-go@${PROTOC_GEN_GO_VERSION}
+RUN go install google.golang.org/grpc/cmd/protoc-gen-go-grpc@${PROTOC_GEN_GO_GRPC_VERSION}
 
 FROM docker.io/library/golang:1.23 as golangci-lint
 RUN go install github.com/golangci/golangci-lint/cmd/golangci-lint@latest

From 0c6633a22dcd35f791ee80d7fd12ecc41266b4f6 Mon Sep 17 00:00:00 2001
From: Oliver Gould <ver@buoyant.io>
Date: Mon, 2 Dec 2024 19:48:12 +0000
Subject: [PATCH 04/23] build(deps): update protoc-gen-go-grpc from 1.2 to
 1.5.1

---
 Dockerfile | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/Dockerfile b/Dockerfile
index e393e9c..05b0171 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -204,7 +204,7 @@ RUN go install github.com/ramya-rao-a/go-outline@latest
 
 FROM docker.io/library/golang:1.23 as go-protoc
 ARG PROTOC_GEN_GO_VERSION=v1.35.2
-ARG PROTOC_GEN_GO_GRPC_VERSION=v1.2
+ARG PROTOC_GEN_GO_GRPC_VERSION=v1.5.1
 RUN go install google.golang.org/protobuf/cmd/protoc-gen-go@${PROTOC_GEN_GO_VERSION}
 RUN go install google.golang.org/grpc/cmd/protoc-gen-go-grpc@${PROTOC_GEN_GO_GRPC_VERSION}
 

From d9898846ffcfbec83836259d89b8fc329fa653d6 Mon Sep 17 00:00:00 2001
From: Oliver Gould <ver@buoyant.io>
Date: Mon, 2 Dec 2024 18:29:38 +0000
Subject: [PATCH 05/23] build(deps): update docker.io/library/rust from 1.76.0
 to 1.83.0

---
 Dockerfile                    | 2 +-
 actions/setup-rust/action.yml | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/Dockerfile b/Dockerfile
index 05b0171..7684d2c 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -280,7 +280,7 @@ ENV PROTOC_NO_VENDOR=1 \
     PROTOC_INCLUDE=/usr/local/include
 
 # A Rust build environment.
-FROM docker.io/rust:1.76-slim-bookworm as rust
+FROM docker.io/library/rust:1.83-slim-bookworm as rust
 RUN --mount=type=cache,from=apt-base,source=/etc/apt,target=/etc/apt,ro \
     --mount=type=cache,from=apt-base,source=/var/cache/apt,target=/var/cache/apt,sharing=locked \
     --mount=type=cache,from=apt-base,source=/var/lib/apt/lists,target=/var/lib/apt/lists,sharing=locked \
diff --git a/actions/setup-rust/action.yml b/actions/setup-rust/action.yml
index f85e4e4..e7d5ef1 100644
--- a/actions/setup-rust/action.yml
+++ b/actions/setup-rust/action.yml
@@ -6,7 +6,7 @@ inputs:
   # TODO(ver): CI should validate at this version matches that in the Dockerfile
   version:
     description: Container image version
-    default: 1.76.0
+    default: 1.83.0
 
   components:
     description: Rust components to install

From 423ad159740aeacf55a11acaaef42722f6900cba Mon Sep 17 00:00:00 2001
From: Oliver Gould <ver@buoyant.io>
Date: Mon, 2 Dec 2024 18:36:58 +0000
Subject: [PATCH 06/23] build(deps): update cargo-deny from 0.14.11 to 0.16.3

---
 Dockerfile | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/Dockerfile b/Dockerfile
index 7684d2c..249e4da 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -166,7 +166,7 @@ RUN url="https://github.com/olix0r/cargo-action-fmt/releases/download/release%2F
 
 # cargo-deny checks cargo dependencies for licensing and RUSTSEC security issues.
 FROM apt-base as cargo-deny
-ARG CARGO_DENY_VERSION=0.14.11
+ARG CARGO_DENY_VERSION=0.16.3
 RUN url="https://github.com/EmbarkStudios/cargo-deny/releases/download/${CARGO_DENY_VERSION}/cargo-deny-${CARGO_DENY_VERSION}-x86_64-unknown-linux-musl.tar.gz" ; \
     scurl "$url" | tar zvxf - --strip-components=1 -C /usr/local/bin "cargo-deny-${CARGO_DENY_VERSION}-x86_64-unknown-linux-musl/cargo-deny"
 

From b4112e411aa24d87dd5517b4c81eb99ed48e5fac Mon Sep 17 00:00:00 2001
From: Oliver Gould <ver@buoyant.io>
Date: Mon, 2 Dec 2024 18:35:55 +0000
Subject: [PATCH 07/23] build(deps): update cargo-nextest from 0.9.67 to 0.9.85

---
 Dockerfile | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/Dockerfile b/Dockerfile
index 249e4da..3f41d62 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -172,7 +172,7 @@ RUN url="https://github.com/EmbarkStudios/cargo-deny/releases/download/${CARGO_D
 
 # cargo-nextest is a nicer test runner.
 FROM apt-base as cargo-nextest
-ARG NEXTEST_VERSION=0.9.67
+ARG NEXTEST_VERSION=0.9.85
 RUN url="https://github.com/nextest-rs/nextest/releases/download/cargo-nextest-${NEXTEST_VERSION}/cargo-nextest-${NEXTEST_VERSION}-x86_64-unknown-linux-gnu.tar.gz" ; \
     scurl "$url" | tar zvxf - -C /usr/local/bin cargo-nextest
 

From 5b58b86974190b79a469d0e046b9779a8c1fe827 Mon Sep 17 00:00:00 2001
From: Oliver Gould <ver@buoyant.io>
Date: Mon, 2 Dec 2024 18:38:04 +0000
Subject: [PATCH 08/23] build(deps): update cargo-tarpaulin from 0.27.3 to
 0.31.3

---
 Dockerfile | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/Dockerfile b/Dockerfile
index 3f41d62..9e0b3ca 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -178,7 +178,7 @@ RUN url="https://github.com/nextest-rs/nextest/releases/download/cargo-nextest-$
 
 # cargo-tarpaulin is a code coverage tool.
 FROM apt-base as cargo-tarpaulin
-ARG CARGO_TARPAULIN_VERSION=0.27.3
+ARG CARGO_TARPAULIN_VERSION=0.31.3
 RUN url="https://github.com/xd009642/tarpaulin/releases/download/${CARGO_TARPAULIN_VERSION}/cargo-tarpaulin-x86_64-unknown-linux-musl.tar.gz" ;\
     scurl "$url" | tar xzvf - -C /usr/local/bin cargo-tarpaulin
 

From e381397c78baee6b3ef395eebfc3fb5666d29f0e Mon Sep 17 00:00:00 2001
From: Oliver Gould <ver@buoyant.io>
Date: Mon, 2 Dec 2024 18:30:42 +0000
Subject: [PATCH 09/23] build(deps): update just from 1.24.0 to 1.37.0

---
 Dockerfile | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/Dockerfile b/Dockerfile
index 9e0b3ca..9e6e825 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -43,7 +43,7 @@ RUN url="https://github.com/olix0r/j5j/releases/download/${J5J_VERSION}/j5j-${J5
 
 # just runs build/test recipes. Like `make` but a bit more ergonomic.
 FROM apt-base as just
-ARG JUST_VERSION=1.24.0
+ARG JUST_VERSION=1.37.0
 RUN url="https://github.com/casey/just/releases/download/${JUST_VERSION}/just-${JUST_VERSION}-x86_64-unknown-linux-musl.tar.gz" ; \
     scurl "$url" | tar zvxf - -C /usr/local/bin just
 

From e85e55a1b7409db97b4d9a7c8f0ecf9ef0702028 Mon Sep 17 00:00:00 2001
From: Oliver Gould <ver@buoyant.io>
Date: Mon, 2 Dec 2024 18:32:05 +0000
Subject: [PATCH 10/23] build(deps): update yq from 4.33.3 to 4.44.5

---
 Dockerfile | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/Dockerfile b/Dockerfile
index 9e6e825..8162d18 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -49,7 +49,7 @@ RUN url="https://github.com/casey/just/releases/download/${JUST_VERSION}/just-${
 
 # yq is kind of like jq, but for YAML.
 FROM apt-base as yq
-ARG YQ_VERSION=v4.33.3
+ARG YQ_VERSION=v4.44.5
 RUN url="https://github.com/mikefarah/yq/releases/download/${YQ_VERSION}/yq_linux_amd64" ; \
     scurl -o /yq "$url" && chmod +x /yq
 

From db304a00b4ba8d2cc57f1feb72e73a562268b14c Mon Sep 17 00:00:00 2001
From: Oliver Gould <ver@buoyant.io>
Date: Mon, 2 Dec 2024 18:35:11 +0000
Subject: [PATCH 11/23] build(deps): update markdownlint-cli2 from 0.10.0 to
 0.15.0

---
 Dockerfile | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/Dockerfile b/Dockerfile
index 8162d18..6e53d3c 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -396,7 +396,7 @@ RUN --mount=type=cache,id=apt-docker,from=apt-base,source=/etc/apt,target=/etc/a
     scurl https://raw.githubusercontent.com/microsoft/vscode-dev-containers/main/script-library/docker-debian.sh | bash -s
 ENV DOCKER_BUILDKIT=1
 
-ARG MARKDOWNLINT_VERSION=0.10.0
+ARG MARKDOWNLINT_VERSION=0.15.0
 RUN --mount=type=cache,from=apt-node,source=/etc/apt,target=/etc/apt,ro \
     --mount=type=cache,from=apt-node,source=/var/cache/apt,target=/var/cache/apt,sharing=locked \
     --mount=type=cache,from=apt-node,source=/var/lib/apt/lists,target=/var/lib/apt/lists,sharing=locked \

From 06f6e473d4578044022cb4b225196152dba1a778 Mon Sep 17 00:00:00 2001
From: Oliver Gould <ver@buoyant.io>
Date: Mon, 2 Dec 2024 18:39:37 +0000
Subject: [PATCH 12/23] build(deps): update shellcheck from 0.9.0 to 0.10.0

---
 Dockerfile | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/Dockerfile b/Dockerfile
index 6e53d3c..f4508f4 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -128,7 +128,7 @@ RUN url="https://raw.githubusercontent.com/slimm609/checksec.sh/${CHECKSEC_VERSI
 
 # shellcheck lints shell scripts.
 FROM apt-base as shellcheck
-ARG SHELLCHECK_VERSION=v0.9.0
+ARG SHELLCHECK_VERSION=v0.10.0
 RUN url="https://github.com/koalaman/shellcheck/releases/download/${SHELLCHECK_VERSION}/shellcheck-${SHELLCHECK_VERSION}.linux.x86_64.tar.xz" ; \
     scurl "$url" | tar xJvf - --strip-components=1 -C /usr/local/bin "shellcheck-${SHELLCHECK_VERSION}/shellcheck"
 COPY --link bin/just-sh /usr/local/bin/

From 29ed7a577105f655267ad26cc551dd43e1bc4440 Mon Sep 17 00:00:00 2001
From: Oliver Gould <ver@buoyant.io>
Date: Mon, 2 Dec 2024 18:55:38 +0000
Subject: [PATCH 13/23] build(deps): update actionlint from 1.6.26 to 1.7.4

---
 Dockerfile | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/Dockerfile b/Dockerfile
index f4508f4..2dd4faa 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -116,7 +116,7 @@ COPY --link --from=step /usr/bin/step-cli /bin/
 
 # actionlint lints github actions workflows.
 FROM apt-base as actionlint
-ARG ACTIONLINT_VERSION=v1.6.26
+ARG ACTIONLINT_VERSION=v1.7.4
 RUN url="https://github.com/rhysd/actionlint/releases/download/${ACTIONLINT_VERSION}/actionlint_${ACTIONLINT_VERSION#v}_linux_amd64.tar.gz" ; \
     scurl "$url" | tar xzvf - -C /usr/local/bin actionlint
 

From d08119efd1e76d28b7aa0bcd517d6ae2a5d31bf2 Mon Sep 17 00:00:00 2001
From: Oliver Gould <ver@buoyant.io>
Date: Mon, 2 Dec 2024 18:43:46 +0000
Subject: [PATCH 14/23] build(deps): update protoc from 3.20.3 to 29.0

---
 Dockerfile | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/Dockerfile b/Dockerfile
index 2dd4faa..3c750f7 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -144,7 +144,7 @@ COPY --link bin/action-* bin/just-dev bin/just-sh /bin/
 ##
 
 FROM apt-base as protobuf
-ARG PROTOC_VERSION=v3.20.3
+ARG PROTOC_VERSION=v29.0
 RUN url="https://github.com/google/protobuf/releases/download/$PROTOC_VERSION/protoc-${PROTOC_VERSION#v}-linux-$(uname -m).zip" ; \
     cd $(mktemp -d) && \
     scurl -o protoc.zip  "$url" && \

From 9f140c00b8874346260c704e4cf19866fde91ff9 Mon Sep 17 00:00:00 2001
From: Oliver Gould <ver@buoyant.io>
Date: Mon, 2 Dec 2024 18:52:27 +0000
Subject: [PATCH 15/23] build(deps): update step from 0.25.2 to 0.28.2

---
 Dockerfile | 9 ++++-----
 1 file changed, 4 insertions(+), 5 deletions(-)

diff --git a/Dockerfile b/Dockerfile
index 3c750f7..8a9c4c9 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -96,10 +96,9 @@ COPY --link k3s-images.json "$K3S_IMAGES_JSON"
 
 # step is a tool for managing certificates.
 FROM apt-base as step
-ARG STEP_VERSION=v0.25.2
-RUN scurl -O "https://dl.step.sm/gh-release/cli/docs-cli-install/${STEP_VERSION}/step-cli_${STEP_VERSION#v}_amd64.deb" \
-    && dpkg -i "step-cli_${STEP_VERSION#v}_amd64.deb" \
-    && rm "step-cli_${STEP_VERSION#v}_amd64.deb"
+ARG STEP_VERSION=v0.28.2
+RUN url="https://dl.smallstep.com/gh-release/cli/gh-release-header/${STEP_VERSION}/step_linux_${STEP_VERSION#v}_amd64.tar.gz" ; \
+    scurl "$url" | tar xzvf - --strip-components=2 -C /usr/local/bin step_"${STEP_VERSION#v}"/bin/step
 
 FROM scratch as tools-k8s
 COPY --link --from=helm /usr/local/bin/helm /bin/
@@ -108,7 +107,7 @@ COPY --link --from=k3d /usr/local/bin/* /bin/
 ENV K3S_IMAGES_JSON=/etc/k3s-images.json
 COPY --link --from=k3d /usr/local/etc/k3s-images.json "$K3S_IMAGES_JSON"
 COPY --link --from=kubectl /usr/local/bin/kubectl /bin/
-COPY --link --from=step /usr/bin/step-cli /bin/
+COPY --link --from=step /usr/local/bin/step /bin/
 
 ##
 ## Linting tools

From cf08bb5da29567f4e0bf1dc0720599e83209b5ce Mon Sep 17 00:00:00 2001
From: Oliver Gould <ver@buoyant.io>
Date: Mon, 2 Dec 2024 18:54:11 +0000
Subject: [PATCH 16/23] build(deps): update kubectl from 1.29.2 to 1.31.3

---
 Dockerfile | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/Dockerfile b/Dockerfile
index 8a9c4c9..78a4eaa 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -78,7 +78,7 @@ RUN url="https://github.com/norwoodj/helm-docs/releases/download/$HELM_DOCS_VERS
 
 # kubectl controls kubernetes clusters.
 FROM apt-base as kubectl
-ARG KUBECTL_VERSION=v1.29.2
+ARG KUBECTL_VERSION=v1.31.3
 RUN url="https://dl.k8s.io/release/${KUBECTL_VERSION}/bin/linux/amd64/kubectl" ; \
     scurl -o /usr/local/bin/kubectl "$url" && chmod +x /usr/local/bin/kubectl
 

From 852af54144305bb0994b3d6d2817ed0c506e6a93 Mon Sep 17 00:00:00 2001
From: Oliver Gould <ver@buoyant.io>
Date: Mon, 2 Dec 2024 18:54:49 +0000
Subject: [PATCH 17/23] build(deps): update k3d from 5.6.0 to 5.7.5

---
 Dockerfile | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/Dockerfile b/Dockerfile
index 78a4eaa..352cd74 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -84,7 +84,7 @@ RUN url="https://dl.k8s.io/release/${KUBECTL_VERSION}/bin/linux/amd64/kubectl" ;
 
 # k3d runs kubernetes clusters in docker.
 FROM apt-base as k3d
-ARG K3D_VERSION=v5.6.0
+ARG K3D_VERSION=v5.7.5
 RUN url="https://raw.githubusercontent.com/rancher/k3d/$K3D_VERSION/install.sh" ; \
     scurl "$url" | USE_SUDO=false K3D_INSTALL_DIR=/usr/local/bin bash
 # just-k3d is a utility that encodes many of the common k3d commands we use.

From eaf247482b51283aed879dc18ff6897245394955 Mon Sep 17 00:00:00 2001
From: Oliver Gould <ver@buoyant.io>
Date: Mon, 2 Dec 2024 20:02:35 +0000
Subject: [PATCH 18/23] build(deps): update k3s image shas

---
 k3s-images.json | 24 ++++++++++++++----------
 1 file changed, 14 insertions(+), 10 deletions(-)

diff --git a/k3s-images.json b/k3s-images.json
index eb4326b..afb7bcc 100644
--- a/k3s-images.json
+++ b/k3s-images.json
@@ -1,18 +1,20 @@
 {
   "name": "docker.io/rancher/k3s",
   "channels": {
-    "stable": "v1.28.6-k3s2",
-    "latest": "v1.29.1-k3s2",
+    "stable": "v1.30.6-k3s1",
+    "latest": "v1.31.2-k3s1",
     "v1.20": "v1.20.15-k3s1",
     "v1.21": "v1.21.14-k3s1",
     "v1.22": "v1.22.17-k3s1",
     "v1.23": "v1.23.17-k3s1",
     "v1.24": "v1.24.17-k3s1",
     "v1.25": "v1.25.16-k3s4",
-    "v1.26": "v1.26.13-k3s2",
-    "v1.27": "v1.27.10-k3s2",
-    "v1.28": "v1.28.6-k3s2",
-    "v1.29": "v1.29.1-k3s2"
+    "v1.26": "v1.26.15-k3s1",
+    "v1.27": "v1.27.16-k3s1",
+    "v1.28": "v1.28.15-k3s1",
+    "v1.29": "v1.29.10-k3s1",
+    "v1.30": "v1.30.6-k3s1",
+    "v1.31": "v1.31.2-k3s1"
   },
   "digests": {
     "v1.20.15-k3s1": "sha256:0e49b63b8ee234e308ff578682f8f4f2f95bffda7ba75077e5da29548cd2a6b3",
@@ -21,9 +23,11 @@
     "v1.23.17-k3s1": "sha256:6f2b6d6d756b3f2f04c864ca2773435b9f19473a3568893720aef46f2cd47606",
     "v1.24.17-k3s1": "sha256:9e034931999854c6210b86a0708fde66b91370459fa077a4f9d008e7f51fc51d",
     "v1.25.16-k3s4": "sha256:b6e5bd6260e36da6c2f84de3d4f4cf636bab973a428149d9962e566bed7dc5cf",
-    "v1.26.13-k3s2": "sha256:19009a12bd34282298c85931aa0ffbf23db2d031bb522fbf4e9803b7e44d773a",
-    "v1.27.10-k3s2": "sha256:39cf130bafeb5472607b9f876500b0cc3e03e623bc298fef959d2bfd3eec4d2e",
-    "v1.28.6-k3s2": "sha256:6b47ec6de901f81f5f361b615dd60a438372b295d73df6966b1482de1704153c",
-    "v1.29.1-k3s2": "sha256:16ef2c025ff314906316b38fa84ce2ed81705432ef4c2cdf79790405365d4086"
+    "v1.26.15-k3s1": "sha256:fabb4a57b34c67c0dfab602bd6ae54b34598a9f9218004089d1202431088fdb1",
+    "v1.27.16-k3s1": "sha256:b7bca8255da9e25a9fdd95bae61f99f8cd424d90691fc5125621b2955bebdfd2",
+    "v1.28.15-k3s1": "sha256:af4f882a4cfaf418cb03d52c59cd150f42bf2b72f084c4592c6a133f4856660d",
+    "v1.29.10-k3s1": "sha256:081d77a383a372d3984a3256d73865eff1c815644ea5935551656ddbe04395f3",
+    "v1.30.6-k3s1": "sha256:204d4094343ed60ff60ed4b009785151c43d8f611761929aae3a1beb02fc0adf",
+    "v1.31.2-k3s1": "sha256:c88e1cf829fd84331c9ec92988509f17b5815527829326810da1a223e8b50a36"
   }
 }

From 45de64962def4795723b386576200e44d36d162a Mon Sep 17 00:00:00 2001
From: Oliver Gould <ver@buoyant.io>
Date: Mon, 2 Dec 2024 18:56:43 +0000
Subject: [PATCH 19/23] build(deps): update helm from 3.14.1 to 3.16.3

---
 Dockerfile | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/Dockerfile b/Dockerfile
index 352cd74..08afd1d 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -65,7 +65,7 @@ COPY --link bin/scurl /bin/
 
 # helm templates kubernetes manifests.
 FROM apt-base as helm
-ARG HELM_VERSION=v3.14.1
+ARG HELM_VERSION=v3.16.3
 RUN url="https://get.helm.sh/helm-${HELM_VERSION}-linux-amd64.tar.gz" ; \
     scurl "$url" | tar xzvf - --strip-components=1 -C /usr/local/bin linux-amd64/helm
 

From 3e3151bf74d5a259e0c3093094f8c9aac9090474 Mon Sep 17 00:00:00 2001
From: Oliver Gould <ver@buoyant.io>
Date: Mon, 2 Dec 2024 18:57:18 +0000
Subject: [PATCH 20/23] build(deps): update helm-docs from 1.12.0 to 1.14.2

---
 Dockerfile | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/Dockerfile b/Dockerfile
index 08afd1d..4b02ea9 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -72,7 +72,7 @@ RUN url="https://get.helm.sh/helm-${HELM_VERSION}-linux-amd64.tar.gz" ; \
 
 # helm-docs generates documentation from helm charts.
 FROM apt-base as helm-docs
-ARG HELM_DOCS_VERSION=v1.12.0
+ARG HELM_DOCS_VERSION=v1.14.2
 RUN url="https://github.com/norwoodj/helm-docs/releases/download/$HELM_DOCS_VERSION/helm-docs_${HELM_DOCS_VERSION#v}_Linux_x86_64.tar.gz" ; \
     scurl "$url" | tar xzvf - -C /usr/local/bin helm-docs
 

From 9462f17a7b422675e1c561e5d1bedb329d2114ff Mon Sep 17 00:00:00 2001
From: Oliver Gould <ver@buoyant.io>
Date: Wed, 4 Dec 2024 22:42:34 +0000
Subject: [PATCH 21/23] feat(devcontainer): set CC and CXX

---
 Dockerfile | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/Dockerfile b/Dockerfile
index 4b02ea9..d6199eb 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -381,6 +381,8 @@ RUN --mount=type=cache,from=apt-llvm,source=/etc/apt,target=/etc/apt,ro \
     --mount=type=cache,from=apt-llvm,source=/var/cache/apt,target=/var/cache/apt,sharing=locked \
     --mount=type=cache,from=apt-llvm,source=/var/lib/apt/lists,target=/var/lib/apt/lists,sharing=locked \
     DEBIAN_FRONTEND=noninteractive apt-get install -y clang-14 llvm-14
+ENV CC=clang-14 \
+    CXX=clang++-14
 
 # Use microsoft's Docker setup script to install the Docker CLI.
 #

From 7ae1bc9082f5a670a59ffdb9ec5f7d137f36c3a7 Mon Sep 17 00:00:00 2001
From: Oliver Gould <ver@buoyant.io>
Date: Mon, 2 Dec 2024 20:11:23 +0000
Subject: [PATCH 22/23] chore(setup-tools): update dev image to v44

---
 actions/setup-tools/action.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/actions/setup-tools/action.yml b/actions/setup-tools/action.yml
index ab70e40..7f6fcab 100644
--- a/actions/setup-tools/action.yml
+++ b/actions/setup-tools/action.yml
@@ -5,7 +5,7 @@ inputs:
   # TODO(ver): CI should validate at this version matches the most recent release tag
   version:
     description: Container image version
-    default: v43
+    default: v44
 
 runs:
   using: composite

From 7b57146232d7f2de8ebd0d55a053ea7c4b7a3e2b Mon Sep 17 00:00:00 2001
From: Oliver Gould <ver@buoyant.io>
Date: Wed, 4 Dec 2024 22:48:25 +0000
Subject: [PATCH 23/23] chore: update README

---
 README.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/README.md b/README.md
index e4018e7..62dee16 100644
--- a/README.md
+++ b/README.md
@@ -217,7 +217,7 @@ jobs:
 Build a single target (e.g. while editing the Dockerfile):
 
 ```sh
-:; just build --target=rust
+:; just targets=rust build
 ```
 
 Update k3s images for all channels: