chore(deps): update helm/kind-action action to v1.14.0

[red-hat-konflux]

This PR contains the following updates:

Package	Type	Update	Change
helm/kind-action	action	minor	v1.12.0 → v1.14.0
helm/kind-action	action	minor	v1.13.0 → v1.14.0

---

Release Notes

helm/kind-action (helm/kind-action)

v1.14.0

Compare Source

What's Changed

• Bump actions/checkout from 5.0.0 to 6.0.1 by @​dependabot[bot] in #​153
• bump kind to v0.31.0 and k8s to v1.35.0 by @​MrFreezeex in #​155
• Bump actions/checkout from 6.0.1 to 6.0.2 in the actions group by @​dependabot[bot] in #​156

New Contributors

• @​MrFreezeex made their first contribution in #​155

Full Changelog: helm/kind-action@v1...v1.14.0

v1.13.0

Compare Source

What's Changed

• chore: verify sha256sum of kubectl by @​felix-kaestner in #​134
• Load GITHUB_PATH in PATH to use correct binaries when creating registry by @​gotha in #​133
• feat: Add cloud provider by @​waltermity in #​135
• chore: bump kind to v0.29.0 by @​pmalek in #​144
• Bump actions/checkout from 4.2.2 to 5.0.0 by @​dependabot[bot] in #​145
• bug: respect 'install_only' action input value by @​mszostok in #​147
• bump kind and kubectl and also nodejs by @​cpanato in #​150

New Contributors

• @​felix-kaestner made their first contribution in #​134
• @​gotha made their first contribution in #​133
• @​waltermity made their first contribution in #​135
• @​pmalek made their first contribution in #​144
• @​mszostok made their first contribution in #​147

Full Changelog: helm/kind-action@v1...v1.13.0

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this PR, check this box

---

To execute skipped test pipelines write comment /ok-to-test.

---

Documentation

Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.

[fullsend-ai-review]

🤖 Finished Review · ✅ Success · Started 11:05 PM UTC · Completed 11:15 PM UTC
Commit: ec21706 · View workflow run →

[fullsend-ai-review]

Review

Findings

High

• [protected-path] .github/workflows/run-task-tests.yaml — This PR modifies files under the protected .github/ path (.github/workflows/run-task-tests.yaml, .github/workflows/validate-task-and-pipeline-yamls.yaml). The PR has no linked issue justifying modification of governance or infrastructure files. Human approval is required for all protected-path changes.
  Remediation: Link an issue or provide explicit justification for modifying CI workflow files under .github/.

---

Next steps:

• /fs-fix — agent addresses review findings automatically
• /fs-fix <your instruction> — agent fixes with your specific guidance
• Push commits directly — review re-runs automatically on push
• /fs-fix-stop — disable automatic fix runs for this PR

Previous run

Review

Findings

High

• [protected-path] .github/workflows/run-task-tests.yaml, .github/workflows/validate-task-and-pipeline-yamls.yaml — This PR modifies files under the protected .github/ path. No linked issue provides authorization for changes to governance/infrastructure files. Human approval is required for all protected-path changes.
  Remediation: A repository maintainer must review and approve changes to protected paths. No code changes are required — this is a governance gate.

---

Next steps:

• /fs-fix — agent addresses review findings automatically
• /fs-fix <your instruction> — agent fixes with your specific guidance
• Push commits directly — review re-runs automatically on push
• /fs-fix-stop — disable automatic fix runs for this PR

Previous run (2)

Review

Findings

High

• [protected-path] .github/workflows/run-task-tests.yaml, .github/workflows/validate-task-and-pipeline-yamls.yaml — Both modified files are under .github/ (a protected path). This PR has no linked issue providing justification for modifying governance/infrastructure files. Human approval is required for all protected-path changes.

Low

• [supply-chain] .github/workflows/validate-task-and-pipeline-yamls.yaml:20 — The helm/kind-action reference uses a mutable version tag (@v1.14.0) instead of a full SHA pin. This is a pre-existing pattern (the validate workflow uses mutable tags for all its action references), but pinning to the commit SHA would improve supply-chain security. The templated run-task-tests.yaml correctly pins to @ef37e7f390d99f746eb8b610417061a60e82a6cc # v1.14.0.
  Remediation: Pin to SHA — uses: helm/kind-action@ef37e7f390d99f746eb8b610417061a60e82a6cc # v1.14.0

[fullsend-ai-review]

🤖 Finished Review · ✅ Success · Started 3:46 PM UTC · Completed 3:55 PM UTC
Commit: 701e62a · View workflow run →

[fullsend-ai-review]

🤖 Finished Review · ✅ Success · Started 3:20 AM UTC · Completed 3:28 AM UTC

Commit: 701e62a · View workflow run →

[fullsend-ai-review]

See the review comment for full details.