chore(deps): opencost, reloader and trivy-operator to current

.gitignore

@@ -4,3 +4,8 @@
 
 # Local planning notes
 .plans/
+
+# Running the gate scripts under scripts/ leaves this behind. An untracked
+# directory is not harmless here: several checks in this org read
+# `git status --porcelain` to decide whether a tree is clean before acting.
+__pycache__/

stack/core/reloader/install.sh

@@ -8,6 +8,6 @@ helm repo update stakater >/dev/null
 
 helm upgrade --install reloader stakater/reloader \
   --namespace kube-system \
-  --version 2.2.14 \
+  --version 2.2.15 \
   --values "${SCRIPT_DIR}/values.yaml" \
   --wait

stack/observability/opencost/install.sh

@@ -10,6 +10,6 @@ kubectl create namespace monitoring --dry-run=client -o yaml | kubectl apply -f
 
 helm upgrade --install opencost opencost/opencost \
   --namespace monitoring \
-  --version 2.5.28 \
+  --version 2.5.29 \
   --values "${SCRIPT_DIR}/values.yaml" \
   --wait

stack/security/trivy-operator/install.sh

@@ -10,6 +10,6 @@ kubectl create namespace trivy-system --dry-run=client -o yaml | kubectl apply -
 
 helm upgrade --install trivy-operator aqua/trivy-operator \
   --namespace trivy-system \
-  --version 0.34.0 \
+  --version 0.35.0 \
   --values "${SCRIPT_DIR}/values.yaml" \
   --wait

stack/upstream.json

@@ -3,7 +3,7 @@
   "upstream": {
     "repository": "nanohype/eks-gitops",
     "path": "applicationsets",
-    "ref": "614560ad84ad0461506c4574f50f7e449a7b3c55"
+    "ref": "46f9f8e94d7d63a7092007f22dcf77a7de6fd9e5"
   },
   "divergences": [
     {