chore(deps): security update (#13899)

Scan output:

Before update:
| OSV URL | CVSS | ECOSYSTEM | PACKAGE | VERSION | SOURCE |

|-------------------------------------|------|-----------|-----------------|---------|--------|
| https://osv.dev/GHSA-557j-xg8c-q2mm | 8.5 | Go | helm.sh/helm/v3 |
3.18.0 | go.mod |

After update:


If a package is showing up in the scan but the script is not trying to
update it then it might be because there is no fixed version yet.

Signed-off-by: kumahq[bot] <110050114+kumahq[bot]@users.noreply.github.com>
Co-authored-by: kumahq[bot] <110050114+kumahq[bot]@users.noreply.github.com>

fix(xds): use correct context to cleanup dataplane object when the pr…

…oxy is disconnecting (backport of #13504) (#13653)

Automatic cherry-pick of #13504 for branch release-2.9

Generated by
[action](https://github.com/kumahq/kuma/actions/runs/15321616516)

cherry-picked commit 8db7ba1

---------

Signed-off-by: Jay Chen <1180092+jijiechen@users.noreply.github.com>
Signed-off-by: slonka <slonka@users.noreply.github.com>
Co-authored-by: Jay Jijie Chen <1180092+jijiechen@users.noreply.github.com>
Co-authored-by: slonka <slonka@users.noreply.github.com>

chore(deps): upgrade golang version from 1.23.8 to 1.23.10 (#13761)

## Motivation

Security fix

Signed-off-by: Lukasz Dziedziak <lukidzi@gmail.com>

fix(oapi): fix generation of oapi schema by skipping not yaml files (…

…backport of #13748) (#13749)

Automatic cherry-pick of #13748 for branch release-2.11

Generated by
[action](https://github.com/kumahq/kuma/actions/runs/15679900207)

cherry-picked commit 3fd9883

Signed-off-by: Marcin Skalski <skalskimarcin33@gmail.com>
Co-authored-by: Marcin Skalski <marcin.skalski@konghq.com>

chore(deps): security update (#13724)

Scan output:

Before update:
| OSV URL | CVSS | ECOSYSTEM | PACKAGE | VERSION | SOURCE |

|------------------------------|------|-----------|---------|---------|--------|
| https://osv.dev/GO-2025-3749 | | Go | stdlib | 1.23.8 | go.mod |
| https://osv.dev/GO-2025-3750 | | Go | stdlib | 1.23.8 | go.mod |
| https://osv.dev/GO-2025-3751 | | Go | stdlib | 1.23.8 | go.mod |

After update:


If a package is showing up in the scan but the script is not trying to
update it then it might be because there is no fixed version yet.

Signed-off-by: kumahq[bot] <110050114+kumahq[bot]@users.noreply.github.com>
Co-authored-by: kumahq[bot] <110050114+kumahq[bot]@users.noreply.github.com>

ci(helm): fix release/helm.sh to properly find helm package (#13700)

## Motivation

Otherwise the job can't find the file:
https://github.com/kumahq/kuma/actions/runs/15531336124/job/43730304100#step:10:19

```
PATH=/home/runner/work/kuma/kuma/.ci_tools/bin:$PATH ./tools/releases/helm.sh  --release
Cloning into 'charts'...
find: ‘.cr-release-packages/*.tgz’: No such file or directory
make: *** [mk/helm.mk:20: helm/release] Error 1
Error: Process completed with exit code 2.
```

This worked on my fork
https://github.com/slonka/charts/releases/tag/kuma-2.11.0

## Implementation information

Find does not take a glob like that, fixed the syntax.

## Supporting documentation

<!-- Is there a MADR? An Issue? A related PR? -->

xrel Kong/team-mesh#400

Signed-off-by: slonka <slonka@users.noreply.github.com>

chore(deps): upgrade golang version from 1.23.6 to 1.23.7 (#13247)

## Motivation

New version

Signed-off-by: Lukasz Dziedziak <lukidzi@gmail.com>

chore(deps): upgrade golang version from 1.23.6 to 1.23.7 (#13246)

## Motivation

New version

Signed-off-by: Lukasz Dziedziak <lukidzi@gmail.com>

chore(deps): upgrade golang version from 1.23.6 to 1.23.7 (#13245)

## Motivation

New version

Signed-off-by: Lukasz Dziedziak <lukidzi@gmail.com>

chore(deps): upgrade golang version from 1.23.6 to 1.23.7 (#13244)

## Motivation
New version

Signed-off-by: Lukasz Dziedziak <lukidzi@gmail.com>