chore(deps): update kyverno

[renovate]

This PR contains the following updates:

Package	Update	Change
kyverno-policies	minor	0.25.0 → 0.26.1
kyverno/kyverno	patch	1.18.1 → 1.18.2

---

Release Notes

giantswarm/kyverno-policies (kyverno-policies)

v0.26.1

Compare Source

Added

• Allow overriding the failurePolicy of the restrict-external-ips supplemental policy.

v0.26.0

Compare Source

Added

• Add optional policies for restricting debug access using ephemeral containers.
• Add io.giantswarm.application.audience and io.giantswarm.application.managed chart annotations for Backstage visibility.
• Push to the default catalog.

Changed

• Migrate chart annotations to OCI-compatible format (change application.giantswarm.io/team to io.giantswarm.application.team, convert restrictions to annotations).
• Updated kyverno-policies to upstream version v1.17.2.

kyverno/kyverno (kyverno/kyverno)

v1.18.2

Compare Source

What's Changed

• fix: restart dynamic watchers in background reporting on 410 (Cherry-pick #​16028) by @​kyverno-bot in #​16030
• fix: do not abort required validation on non-matching images (Cherry-pick #​16208) by @​kyverno-bot in #​16218
• fix(cli): allow multiple CRDs in to be in the --crd-path file (Cherry-pick #​16161) by @​kyverno-bot in #​16215
• fix(gpol,mpol): enforce namespace boundary in generator.apply() (backport GHSA-79gf-7frw-68m9 to release-1.18) by @​realshuting in #​16238
• feat(pss-helm): add image to allowed volumetypes (Cherry-pick #​15906) by @​kyverno-bot in #​16332
• backport(release-1.18): security dependency bumps from #​16340 by @​realshuting in #​16343
• fix(release-1.18): roll up codeql dependency and toolchain updates by @​realshuting in #​16395
• fix(reports): correct label prefix for mpol/dpol policies (Cherry-pick #​16452) by @​kyverno-bot in #​16453
• chore: cut v1.18.2-rc.2 by @​realshuting in #​16517
• chore: cut v1.18.2 by @​realshuting in #​16526

Full Changelog: kyverno/kyverno@v1.18.1...v1.18.2

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.