chore(deps): update all patch versions

[renovate]

This PR contains the following updates:

Package	Type	Update	Change	Age	Confidence
eclipse-temurin	final	digest	8f94f99 → 1089975
grafana/flint		patch	v0.20.0 → v0.20.2
kubectl		patch	1.35.3 → 1.35.4
com.gradle.develocity	plugin	patch	4.4.0 → 4.4.1

---

Release Notes

grafana/flint (grafana/flint)

v0.20.2

Compare Source

flint v2 — first binary release

Full rewrite from bash scripts wrapping super-linter to a native Rust binary orchestrating mise-installed tools directly. Last v1 release was v0.9.2; this is the first working v2 binary release.

Why

• Speed: no container pull, no full-repo scan — diff-aware by default (--from-ref / --to-ref), parallel check execution across files.
• Native tools: each linter installed via mise from its upstream source (github:, ubi:, npm:, cargo:) — no bundled versions, transparent to Renovate.
• One entry point: flint run / flint run --fix replaces lint:super-linter, lint:links, lint:renovate-deps, setup:native-lint-tools.
• Cross-platform: Linux x86_64/arm64, macOS x86_64/arm64, Windows x86_64 binaries.

Install

# mise.toml
[tools]
"github:grafana/flint" = "0.20.2"

[env]
FLINT_CONFIG_DIR = ".github/config"

[tasks.lint]
run = "flint run"

[tasks."lint:fix"]
run = "flint run --fix"

Bootstrap a repo with flint init (interactive config scaffold).
Install a pre-commit hook with flint hook install.

Linters supported

Category	Linters
Shell	shellcheck, shfmt
Config / docs	editorconfig-checker, actionlint, prettier, markdownlint-cli2, codespell
Links	lychee (GitHub anchor remap, fragment support, rate-limit resilience)
Renovate	renovate-deps (tracks indirect deps pinned in .github/ workflows)
Rust	cargo-fmt, cargo-clippy
Go	gofmt
Java / Kotlin	google-java-format, ktlint, license-header
JS / TS	biome, prettier
Python	ruff, ruff-format
.NET	dotnet-format
Docker	hadolint
XML	xmllint (via xmloxide, pure-Rust)

Highlights

• Formatter category — formatters marked with .formatter() are automatically excluded from editorconfig-checker, preventing double-reporting.
• Special checks — link checking and renovate-deps are first-class, not shell-outs. license-header is a pure-Rust check (reads first N lines, substring-matches configured text).
• Fix mode — flint run --fix runs per-linter fix commands in-place.
• Diff mode — without flags, runs only on files changed since merge base with origin/main. --full for full-repo, --from-ref/--to-ref for arbitrary ranges.
• Obsolete key detection — flint update non-interactively migrates mise.toml entries when a linter's upstream key changes (e.g. npm:markdownlint-cli → npm:markdownlint-cli2).
• Windows — .windows_java_jar() registry flag for JAR-backed tools (ktlint); quote_path + shell_words for double-quote path handling.

Documentation

• README.md — getting started, configuration reference
• AGENTS-V2.md — architecture and contribution guide

Consumer rollout

Open migration PRs replacing super-linter: grafana/mox, grafana/oats, grafana/otel-checker, grafana/grafana-opentelemetry-java, grafana/docker-otel-lgtm, prometheus/client_java, open-telemetry/opentelemetry-java-instrumentation.

---

Changelog (aggregated v0.9.2..v0.20.2)

Added

• flint v2 Rust binary (#​139)
• flint update command, explicit JAR flag (#​146)
• native linting mode and version mapping infrastructure (#​93)
• NATIVE env var for container-free linting (#​107)
• Renovate shareable preset for consuming repos (#​17)
• consolidated link checking and autofix flags (#​7)
• line-number anchors and issue-comment handling in link checks (#​56)
• GitHub URL remaps for line-number and fragment anchors (#​28)
• auto-remap base-branch GitHub URLs to PR branch (#​18)
• SHA-pinned URL support in Renovate preset (#​21)
• slim super-linter image default (#​24)
• migrate from release-please to release-plz (#​171)

Fixed

• release-pr runs after release to avoid changelog race (#​184)
• workflow_dispatch retrigger for existing tags (#​167)
• suppress component prefix in release tags (#​166)
• correct template variable in pr_body (#​178)
• activate mise environment in native lint mode (#​123)
• include staged files in native lint file list (#​135)
• native lint in worktrees, trust toml, use ec binary, drop isort (#​134)
• fail native lint when enabled tools are missing (#​111)
• decouple version mapping generation from pinned super-linter version (#​112)
• renovate-deps forwards GITHUB_TOKEN as GITHUB_COM_TOKEN (#​132)
• improve link checker reliability against GitHub rate limiting (#​95)
• strip Scroll-to-Text-Fragment anchors (#​86)
• remap same-repo GitHub URLs to local file paths (#​100)
• exclude GitHub compare links from lychee (#​10)
• use remap instead of exclude for issue-comment anchors (#​58)
• 'mise run fix' hint on lint failure (#​90)
• regex anchors in remap patterns (#​19)
• run shellcheck on .bats files in native mode (#​137)
• tighten markdownlint config for native mode (#​106)
• replace broken release-please PR comment with docs (#​12)
• release-please footer on release PRs (#​40)

Dependencies

• move icon to assets/ to fix release-plz (#​177)
• npm:renovate → v43.102.11 (security) (#​174)
• similar → v3.1.0 (#​173)
• github:mvdan/sh → v3.13.1 (#​163)
• crossterm → 0.29 (#​156)
• similar → v3 (#​160)
• toml → v1 (#​161)
• toml_edit → 0.25 (#​158)

v0.20.1

Compare Source

kubernetes/kubernetes (kubectl)

v1.35.4

Compare Source

See kubernetes-announce@. Additional binary downloads are linked in the CHANGELOG.

See the CHANGELOG for more details.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • Between 12:00 AM and 07:59 AM, only on Tuesday (* 0-7 * * 2)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.