chore: update dependencies

[renovate]

Update Request | Renovate Bot

This PR contains the following updates:

Package	Type	Update	Change	Age	Adoption	Passing	Confidence
cgr.dev/chainguard/wolfi-base		digest	2a43204 → 70750df
git://git.kernel.org/pub/scm/utils/mdadm/mdadm.git		minor	4.4 → 4.6
github.com/dsseng/syft	replace	patch	v1.42.4-0.20260415171054-31b9430f030f → v1.42.4
golang.org/x/sys	require	minor	v0.42.0 → v0.43.0
google/gvisor		patch	20260406.0 → 20260413.0
https://github.com/spinkube/containerd-shim-spin.git		minor	v0.23.0 → v0.24.0
https://gitlab.gnome.org/GNOME/libxml2.git		patch	2.15.2 → 2.15.3
netbirdio/netbird		minor	0.67.4 → 0.68.3
sqlite/sqlite		minor	3.52.0 → 3.53.0

---

Release Notes

dsseng/syft (github.com/dsseng/syft)

v1.42.4

Compare Source

google/gvisor (google/gvisor)

v20260413.0

Compare Source

spinkube/containerd-shim-spin (https://github.com/spinkube/containerd-shim-spin.git)

v0.24.0

Compare Source

Changed

• Advertise that node-installer is being deprecated in favor of runtime class manager (#​388)
• Use Wasmtime configuration defaults from spin_core crate (#​423)
• Dependencies updates (#​403, #​404, #​406, #​407)
• Bump to Spin 3.6.3 release for Wasmtime security updates (#​427)

Fixed

• Update traefik API group and remove strip-prefix middleware (#​417)
• Update K3d k3s image to Kubernetes 1.35.2 (#​415)
• Update Cross image to build libseccomp from source, drop jorgeprendes420 images (#​428)

GNOME/libxml2 (https://gitlab.gnome.org/GNOME/libxml2.git)

v2.15.3

Compare Source

Release 2.15.3

netbirdio/netbird (netbirdio/netbird)

v0.68.3

Compare Source

What's Changed

• [management] revert ctx dependency in get account with backpressure by @​crn4 in #​5878
• [management] add context cancel monitoring by @​pascal-fischer in #​5879
• [misc] Add CI check for proto version string changes by @​lixmal in #​5854

Full Changelog: netbirdio/netbird@v0.68.2...v0.68.3

v0.68.2

Compare Source

What's Changed

• [management] network map tests by @​mlsmaycon in #​5795
• [management] use sql null vars by @​pascal-fischer in #​5844
• [client] Use native firewall for peer ACLs in userspace WireGuard mode by @​lixmal in #​5668
• [misc] update dashboards by @​pascal-fischer in #​5840
• [management] update account delete with proper proxy domain and service cleanup by @​pascal-fischer in #​5817
• [management] allow local routing peer resource by @​pascal-fischer in #​5814
• [management] enable access log cleanup by default by @​pascal-fischer in #​5842
• [client] Update RaceDial to accept context for improved cancellation by @​pappz in #​5849
• [management] add domain and service cleanup migration by @​pascal-fischer in #​5850
• [client] Fix Android internet blackhole caused by stale route re-injection on TUN rebuild by @​pappz in #​5865
• [client] Fix/grpc retry by @​pappz in #​5750
• [client] Fix DNS resolution with userspace WireGuard and kernel firewall by @​lixmal in #​5873

Full Changelog: netbirdio/netbird@v0.68.1...v0.68.2

v0.68.1

Compare Source

What's Changed

• [client] Include service.json in debug bundle by @​lixmal in #​5825
• [client] Fix FreeBSD not reporting network addresses by @​lixmal in #​5827
• [client] Handle UPnP routers that only support permanent leases by @​lixmal in #​5826
• [management] use NullBool for terminated flag by @​pascal-fischer in #​5829

Full Changelog: netbirdio/netbird@v0.68.0...v0.68.1

v0.68.0

Compare Source

What's Changed

• [proxy] Update package-lock.json by @​heisbrot in #​5661
• [client] Unexport GetServerPublicKey, add HealthCheck method by @​pappz in #​5735
• [client] Fix mgmProber interface to match unexported GetServerPublicKey by @​pappz in #​5815
• [management] validate permissions on groups read with name by @​pascal-fischer in #​5749
• [management] Fix missing service columns in pgx account loader by @​lixmal in #​5816
• [client] Error out on netbird expose when block inbound is enabled by @​lixmal in #​5818
• [client] Skip down interfaces in network address collection for posture checks by @​lixmal in #​5768
• [client] Fix SSH server Stop() deadlock with active sessions by @​lixmal in #​5717
• [client] Add TCP DNS support for local listener by @​lixmal in #​5758
• [client] Fix iOS DNS upstream routing for deselected exit nodes by @​mlsmaycon in #​5803
• [client] Add NAT-PMP/UPnP support by @​lixmal in #​5202
• [relay] Replace net.Conn with context-aware Conn interface by @​pappz in #​5770
• [client] Fix SSH proxy mangling shell quoting in forwarded commands by @​lixmal in #​5669
• [client] Don't abort UI debug bundle when up/down fails by @​lixmal in #​5780

Full Changelog: netbirdio/netbird@v0.67.4...v0.68.0

sqlite/sqlite (sqlite/sqlite)

v3.53.0

Compare Source

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • Between 12:00 AM and 03:59 AM, only on Monday (* 0-3 * * 1)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.