BOT: run 'make upgrade-klone' and 'make generate'

Signed-off-by: cert-manager-bot <cert-manager-bot@users.noreply.github.com>

Author: cert-manager-bot

.github/workflows/govulncheck.yaml

@@ -20,7 +20,7 @@ jobs:
     if: github.repository_owner == 'cert-manager'
 
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
         # Adding `fetch-depth: 0` makes sure tags are also fetched. We need
         # the tags so `git describe` returns a valid version.
         # see https://github.com/actions/checkout/issues/701 for extra info about this option

.github/workflows/make-self-upgrade.yaml

@@ -32,7 +32,7 @@ jobs:
           echo "This workflow should not be run on a non-branch-head."
           exit 1
 
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
         # Adding `fetch-depth: 0` makes sure tags are also fetched. We need
         # the tags so `git describe` returns a valid version.
         # see https://github.com/actions/checkout/issues/701 for extra info about this option

klone.yaml

@@ -10,70 +10,70 @@ targets:
     - folder_name: boilerplate
       repo_url: https://github.com/cert-manager/makefile-modules.git
       repo_ref: main
-      repo_hash: 46c5dc86a9a144e7e71c00a304ebd2844e1545fa
+      repo_hash: 895219954b7d10dceae039bcc287b9698222ae91
       repo_path: modules/boilerplate
     - folder_name: cert-manager
       repo_url: https://github.com/cert-manager/makefile-modules.git
       repo_ref: main
-      repo_hash: 46c5dc86a9a144e7e71c00a304ebd2844e1545fa
+      repo_hash: 895219954b7d10dceae039bcc287b9698222ae91
       repo_path: modules/cert-manager
     - folder_name: controller-gen
       repo_url: https://github.com/cert-manager/makefile-modules.git
       repo_ref: main
-      repo_hash: 46c5dc86a9a144e7e71c00a304ebd2844e1545fa
+      repo_hash: 895219954b7d10dceae039bcc287b9698222ae91
       repo_path: modules/controller-gen
     - folder_name: generate-verify
       repo_url: https://github.com/cert-manager/makefile-modules.git
       repo_ref: main
-      repo_hash: 46c5dc86a9a144e7e71c00a304ebd2844e1545fa
+      repo_hash: 895219954b7d10dceae039bcc287b9698222ae91
       repo_path: modules/generate-verify
     - folder_name: go
       repo_url: https://github.com/cert-manager/makefile-modules.git
       repo_ref: main
-      repo_hash: 46c5dc86a9a144e7e71c00a304ebd2844e1545fa
+      repo_hash: 895219954b7d10dceae039bcc287b9698222ae91
       repo_path: modules/go
     - folder_name: helm
       repo_url: https://github.com/cert-manager/makefile-modules.git
       repo_ref: main
-      repo_hash: 46c5dc86a9a144e7e71c00a304ebd2844e1545fa
+      repo_hash: 895219954b7d10dceae039bcc287b9698222ae91
       repo_path: modules/helm
     - folder_name: help
       repo_url: https://github.com/cert-manager/makefile-modules.git
       repo_ref: main
-      repo_hash: 46c5dc86a9a144e7e71c00a304ebd2844e1545fa
+      repo_hash: 895219954b7d10dceae039bcc287b9698222ae91
       repo_path: modules/help
     - folder_name: kind
       repo_url: https://github.com/cert-manager/makefile-modules.git
       repo_ref: main
-      repo_hash: 46c5dc86a9a144e7e71c00a304ebd2844e1545fa
+      repo_hash: 895219954b7d10dceae039bcc287b9698222ae91
       repo_path: modules/kind
     - folder_name: klone
       repo_url: https://github.com/cert-manager/makefile-modules.git
       repo_ref: main
-      repo_hash: 46c5dc86a9a144e7e71c00a304ebd2844e1545fa
+      repo_hash: 895219954b7d10dceae039bcc287b9698222ae91
       repo_path: modules/klone
     - folder_name: licenses
       repo_url: https://github.com/cert-manager/makefile-modules.git
       repo_ref: main
-      repo_hash: 46c5dc86a9a144e7e71c00a304ebd2844e1545fa
+      repo_hash: 895219954b7d10dceae039bcc287b9698222ae91
       repo_path: modules/licenses
     - folder_name: oci-build
       repo_url: https://github.com/cert-manager/makefile-modules.git
       repo_ref: main
-      repo_hash: 46c5dc86a9a144e7e71c00a304ebd2844e1545fa
+      repo_hash: 895219954b7d10dceae039bcc287b9698222ae91
       repo_path: modules/oci-build
     - folder_name: oci-publish
       repo_url: https://github.com/cert-manager/makefile-modules.git
       repo_ref: main
-      repo_hash: 46c5dc86a9a144e7e71c00a304ebd2844e1545fa
+      repo_hash: 895219954b7d10dceae039bcc287b9698222ae91
       repo_path: modules/oci-publish
     - folder_name: repository-base
       repo_url: https://github.com/cert-manager/makefile-modules.git
       repo_ref: main
-      repo_hash: 46c5dc86a9a144e7e71c00a304ebd2844e1545fa
+      repo_hash: 895219954b7d10dceae039bcc287b9698222ae91
       repo_path: modules/repository-base
     - folder_name: tools
       repo_url: https://github.com/cert-manager/makefile-modules.git
       repo_ref: main
-      repo_hash: 46c5dc86a9a144e7e71c00a304ebd2844e1545fa
+      repo_hash: 895219954b7d10dceae039bcc287b9698222ae91
       repo_path: modules/tools

make/_shared/go/base/.github/workflows/govulncheck.yaml

@@ -20,7 +20,7 @@ jobs:
     if: github.repository_owner == 'ORGNAMEHERE'
 
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
         # Adding `fetch-depth: 0` makes sure tags are also fetched. We need
         # the tags so `git describe` returns a valid version.
         # see https://github.com/actions/checkout/issues/701 for extra info about this option

make/_shared/helm/helm.mk

@@ -32,7 +32,7 @@ ifndef helm_chart_version
 $(error helm_chart_version is not set)
 endif
 ifneq ($(helm_chart_version:v%=v),v)
-$(error helm_chart_version "$(helm_chart_version)" should start with a "v")
+$(error helm_chart_version "$(helm_chart_version)" should start with a "v" - did you forget to pull tags from the remote repository?)
 endif
 
 ifndef helm_values_mutation_function

make/_shared/repository-base/base/.github/workflows/make-self-upgrade.yaml

@@ -32,7 +32,7 @@ jobs:
           echo "This workflow should not be run on a non-branch-head."
           exit 1
 
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
         # Adding `fetch-depth: 0` makes sure tags are also fetched. We need
         # the tags so `git describe` returns a valid version.
         # see https://github.com/actions/checkout/issues/701 for extra info about this option