chore(deps): update azure/k8s-deploy action to v7 (#76)

This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [azure/k8s-deploy](https://github.com/azure/k8s-deploy) | action | major | `v6.0.0` → `v7.0.0` |

---

### Release Notes

<details>
<summary>azure/k8s-deploy (azure/k8s-deploy)</summary>

### [`v7.0.0`](https://github.com/Azure/k8s-deploy/releases/tag/v7.0.0)

[Compare Source](https://github.com/azure/k8s-deploy/compare/v7.0.0...v7.0.0)

##### Changed

- [#&#8203;528](https://github.com/azure/k8s-deploy/issues/528) [Confine manifest paths to GITHUB\_WORKSPACE (**breaking**: workflows passing `manifests:` paths outside the workspace now fail with a clear error)](https://github.com/Azure/k8s-deploy/pull/528)
- [#&#8203;527](https://github.com/azure/k8s-deploy/issues/527) [Pin release workflow to commit SHA for supply chain safety](https://github.com/Azure/k8s-deploy/pull/527)

##### Security

- [#&#8203;528](https://github.com/azure/k8s-deploy/issues/528) [Harden URL fetcher error handling in writeYamlFromURLToFile](https://github.com/Azure/k8s-deploy/pull/528)
- [#&#8203;537](https://github.com/azure/k8s-deploy/issues/537) [Bump undici from 6.25.0 to 6.27.0](https://github.com/Azure/k8s-deploy/pull/537)
- [#&#8203;536](https://github.com/azure/k8s-deploy/issues/536) [Bump actions/checkout in /.github/workflows in the actions group](https://github.com/Azure/k8s-deploy/pull/536)
- [#&#8203;534](https://github.com/azure/k8s-deploy/issues/534) [Bump the actions group with 3 updates](https://github.com/Azure/k8s-deploy/pull/534)
- [#&#8203;533](https://github.com/azure/k8s-deploy/issues/533) [Bump esbuild from 0.28.0 to 0.28.1](https://github.com/Azure/k8s-deploy/pull/533)
- [#&#8203;532](https://github.com/azure/k8s-deploy/issues/532) [Bump github/codeql-action in /.github/workflows in the actions group](https://github.com/Azure/k8s-deploy/pull/532)
- [#&#8203;531](https://github.com/azure/k8s-deploy/issues/531) [Bump @&#8203;types/node from 25.9.1 to 25.9.2 in the actions group](https://github.com/Azure/k8s-deploy/pull/531)
- [#&#8203;530](https://github.com/azure/k8s-deploy/issues/530) [Bump the actions group in /.github/workflows with 2 updates](https://github.com/Azure/k8s-deploy/pull/530)
- [#&#8203;529](https://github.com/azure/k8s-deploy/issues/529) [Bump the actions group with 2 updates](https://github.com/Azure/k8s-deploy/pull/529)
- [#&#8203;526](https://github.com/azure/k8s-deploy/issues/526) [Bump the actions group in /.github/workflows with 2 updates](https://github.com/Azure/k8s-deploy/pull/526)
- [#&#8203;525](https://github.com/azure/k8s-deploy/issues/525) [Bump the actions group with 2 updates](https://github.com/Azure/k8s-deploy/pull/525)
- [#&#8203;524](https://github.com/azure/k8s-deploy/issues/524) [Bump @&#8203;types/node from 25.7.0 to 25.9.0 in the actions group](https://github.com/Azure/k8s-deploy/pull/524)
- [#&#8203;523](https://github.com/azure/k8s-deploy/issues/523) [Bump github/codeql-action in /.github/workflows in the actions group](https://github.com/Azure/k8s-deploy/pull/523)

### [`v7`](https://github.com/azure/k8s-deploy/compare/v6.0.0...v7.0.0)

[Compare Source](https://github.com/azure/k8s-deploy/compare/v6.0.0...v7.0.0)

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yNjMuOSIsInVwZGF0ZWRJblZlciI6IjQzLjI2My45IiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJhY3Rpb24iLCJhdXRvbWVyZ2UiLCJkZXBzIl19-->

Reviewed-on: https://gitea.t000-n.de/t.behrendt/k_deploy_workflows/pulls/76
Reviewed-by: t.behrendt <2+t.behrendt@noreply.localhost>
Co-authored-by: Renovate Bot <renovate@t00n.de>
Co-committed-by: Renovate Bot <renovate@t00n.de>

.gitea/workflows/deploy.yaml

@@ -74,12 +74,12 @@ jobs:
         with:
           repo: ${{ github.repository }}
       - uses: azure/setup-kubectl@829323503d1be3d00ca8346e5391ca0b07a9ab0d # v5.1.0
-      - uses: azure/k8s-set-context@89b837d75b40a7bd2ddafde837473c212db8b313 # v5.0.0
+      - uses: azure/k8s-set-context@8698eba2499e9012f0d5085f8798077cce4bc526 # v5.0.1
         with:
           method: kubeconfig
           kubeconfig: ${{ secrets.KUBECONFIG }}
       - name: Set restic backup secret
-        uses: azure/k8s-create-secret@5e49ad902ac755e0815974a44904c728da961747 # v6.0.0
+        uses: azure/k8s-create-secret@ba774cded95cc0d795806a986fecd1205a6c2320 # v6.0.1
         with:
           namespace: ${{ inputs.namespace || steps.namespace.outputs.namespace }}
           secret-name: backupsidecar-secret
@@ -103,12 +103,12 @@ jobs:
         with:
           repo: ${{ github.repository }}
       - uses: azure/setup-kubectl@829323503d1be3d00ca8346e5391ca0b07a9ab0d # v5.1.0
-      - uses: azure/k8s-set-context@89b837d75b40a7bd2ddafde837473c212db8b313 # v5.0.0
+      - uses: azure/k8s-set-context@8698eba2499e9012f0d5085f8798077cce4bc526 # v5.0.1
         with:
           method: kubeconfig
           kubeconfig: ${{ secrets.KUBECONFIG }}
       - name: Deploy Kubernetes manifests
-        uses: azure/k8s-deploy@c7ebd0d5f39477a23f1b5dea0f52e6db04adf28e # v6.0.0
+        uses: azure/k8s-deploy@51ca02a8b7225fbd0924aac359c5b336a5f1e5b4 # v7.0.0
         with:
           action: deploy
           manifests: "${{ inputs.k8s_dir }}"
@@ -129,13 +129,13 @@ jobs:
         with:
           repo: ${{ github.repository }}
       - uses: azure/setup-kubectl@829323503d1be3d00ca8346e5391ca0b07a9ab0d # v5.1.0
-      - uses: azure/setup-helm@dda3372f752e03dde6b3237bc9431cdc2f7a02a2 # v5
-      - uses: azure/k8s-set-context@89b837d75b40a7bd2ddafde837473c212db8b313 # v5.0.0
+      - uses: azure/setup-helm@9bc31f4ebc9c6b171d7bfbaa5d006ae7abdb4310 # v5.0.1
+      - uses: azure/k8s-set-context@8698eba2499e9012f0d5085f8798077cce4bc526 # v5.0.1
         with:
           method: kubeconfig
           kubeconfig: ${{ secrets.KUBECONFIG }}
       - name: Deploy Helm
-        uses: helmfile/helmfile-action@daefb3e1fa5a91b7a88d30870d20da4896944818 # v2.4.5
+        uses: helmfile/helmfile-action@1f44bcb43e5fb17ecb2685d8b6081ec5f6aa5fcf # v2.4.7
         with:
           helmfile-args: apply
           namespace: ${{ inputs.namespace || steps.namespace.outputs.namespace }}

.gitea/workflows/release.yaml

@@ -19,10 +19,10 @@ jobs:
           fetch-depth: 0
       - name: Increment tag
         id: tag
-        uses: https://gitea.t000-n.de/t.behrendt/conventional-semantic-git-tag-increment@e393dbb067c09fd43519392572ccf63b66cba92d # 0.1.39
+        uses: https://gitea.t000-n.de/t.behrendt/conventional-semantic-git-tag-increment@3ab82e6aa1db388a34562f5ce6eedb598651d916 # 0.1.42
         with:
           token: ${{ secrets.GITEA_TOKEN }}
       - name: Push tag
-        uses: https://gitea.t000-n.de/t.behrendt/actions/release-git-tag@29f50ea246d5d9a62ac3c611fa5c8a6e9846df5a # 0.2.8
+        uses: https://gitea.t000-n.de/t.behrendt/actions/release-git-tag@7f9ed2bccd9161d124284619464c5dc5b15b79c0 # 0.2.11
         with:
           tag: ${{ steps.tag.outputs.new-tag }}

.gitea/workflows/validate.yaml

@@ -69,7 +69,7 @@ jobs:
         with:
           repo: ${{ github.repository }}
       - uses: azure/setup-kubectl@829323503d1be3d00ca8346e5391ca0b07a9ab0d # v5.1.0
-      - uses: azure/k8s-set-context@89b837d75b40a7bd2ddafde837473c212db8b313 # v5.0.0
+      - uses: azure/k8s-set-context@8698eba2499e9012f0d5085f8798077cce4bc526 # v5.0.1
         with:
           method: kubeconfig
           kubeconfig: ${{ secrets.KUBECONFIG }}
@@ -94,13 +94,13 @@ jobs:
         with:
           repo: ${{ github.repository }}
       - uses: azure/setup-kubectl@829323503d1be3d00ca8346e5391ca0b07a9ab0d # v5.1.0
-      - uses: azure/setup-helm@dda3372f752e03dde6b3237bc9431cdc2f7a02a2 # v5
-      - uses: azure/k8s-set-context@89b837d75b40a7bd2ddafde837473c212db8b313 # v5.0.0
+      - uses: azure/setup-helm@9bc31f4ebc9c6b171d7bfbaa5d006ae7abdb4310 # v5.0.1
+      - uses: azure/k8s-set-context@8698eba2499e9012f0d5085f8798077cce4bc526 # v5.0.1
         with:
           method: kubeconfig
           kubeconfig: ${{ secrets.KUBECONFIG }}
       - name: Validate Helm
-        uses: helmfile/helmfile-action@daefb3e1fa5a91b7a88d30870d20da4896944818 # v2.4.5
+        uses: helmfile/helmfile-action@1f44bcb43e5fb17ecb2685d8b6081ec5f6aa5fcf # v2.4.7
         with:
           helmfile-args: diff
           namespace: ${{ inputs.namespace || steps.namespace.outputs.namespace }}