chore(deps): bump the replicated-sdk group across 6 directories with 1 update

[dependabot]

Bumps the replicated-sdk group with 1 update in the /applications/fake-services/app directory: replicated.
Bumps the replicated-sdk group with 1 update in the /applications/mlflow/charts/mlflow directory: replicated.
Bumps the replicated-sdk group with 1 update in the /applications/n8n/charts/n8n directory: replicated.
Bumps the replicated-sdk group with 1 update in the /applications/onlineboutique/chart directory: replicated.
Bumps the replicated-sdk group with 1 update in the /applications/storagebox/charts/storagebox directory: replicated.
Bumps the replicated-sdk group with 1 update in the /applications/wg-easy/charts/wg-easy directory: replicated.

Updates replicated from 1.18.0 to 1.19.3

Updates replicated from 1.18.0 to 1.19.3

Updates replicated from 1.18.0 to 1.19.3

Updates replicated from 1.18.0 to 1.19.3

Updates replicated from 1.18.0 to 1.19.3

Updates replicated from 1.18.0 to 1.19.3

Updates replicated from 1.18.0 to 1.19.3

Updates replicated from 1.18.0 to 1.19.3

Updates replicated from 1.18.0 to 1.19.3

Updates replicated from 1.18.0 to 1.19.3

Updates replicated from 1.18.0 to 1.19.3

Updates replicated from 1.18.0 to 1.19.3

Updates replicated from 1.18.0 to 1.19.3

Updates replicated from 1.18.0 to 1.19.3

Updates replicated from 1.18.0 to 1.19.3

Updates replicated from 1.18.0 to 1.19.3

Updates replicated from 1.18.0 to 1.19.3

Updates replicated from 1.18.0 to 1.19.3

Updates replicated from 1.18.0 to 1.19.3

Updates replicated from 1.18.0 to 1.19.3

Updates replicated from 1.18.0 to 1.19.3

Updates replicated from 1.18.0 to 1.19.3

Updates replicated from 1.18.0 to 1.19.3

Updates replicated from 1.18.0 to 1.19.3

Updates replicated from 1.18.0 to 1.19.3

Updates replicated from 1.18.0 to 1.19.3

Updates replicated from 1.18.0 to 1.19.3

Updates replicated from 1.18.0 to 1.19.3

Updates replicated from 1.18.0 to 1.19.3

Updates replicated from 1.18.0 to 1.19.3

Updates replicated from 1.18.0 to 1.19.3

Updates replicated from 1.18.0 to 1.19.3

Updates replicated from 1.18.0 to 1.19.3

Updates replicated from 1.18.0 to 1.19.3

Updates replicated from 1.18.0 to 1.19.3

Updates replicated from 1.18.0 to 1.19.3

[kriscoleman]

CI fixes included in this PR

This dependabot PR (replicated-sdk bump) exposed several CI issues across multiple workflows. Here's what we ran into and how we addressed them:

1. Secrets unavailable on dependabot PRs

Problem: MLflow CI, Storagebox CI, and WG-Easy PR Validation workflows all failed because GitHub doesn't expose repo secrets to dependabot-triggered pull_request events. Jobs that need REPLICATED_PLATFORM_EXAMPLES_TOKEN or WG_EASY_REPLICATED_API_TOKEN would run and fail with net/http: invalid header field value for "Authorization".

Fix: Added check-secret gate jobs to all three workflows, matching the existing pattern in flagd-ci.yml. Lint/template jobs still run; integration test jobs that require secrets are skipped gracefully.

2. MLflow KOTS test license download failures

Problem: The kots-install-test job used task license:download, which ran docker run replicated/vendor-cli:latest to download the customer license. This was failing with HTTP 500 from the Replicated API — and had no retry logic.

Fix: Replaced the Docker-based vendor CLI approach with the native replicated CLI:

• Added an explicit "Install Replicated CLI" step (the create-cluster action doesn't put it on PATH)
• Added retry logic with exponential backoff (5 attempts) to handle transient API errors

3. Unpinned create-customer action

Problem: The create-customer action was referencing @main while every other replicated-action in the workflow was pinned to @v1.17.0.

Fix: Pinned to @v1.17.0 for consistency.

4. Cleanup job cascade failures

Problem: The cleanup-test-release job's Archive Customer and Archive Channel steps would fail (e.g., due to Node.js 20 deprecation issues in the action), causing the cleanup job itself to be marked as failed — masking the actual test results.

Fix: Added continue-on-error: true to both archive steps so cleanup issues don't create additional noise.

Also closed

Closed PR #157 (the all-other-deps grouped dependabot PR) and removed the all-other-deps group from the dependabot config (#158, merged) so each non-replicated dependency gets its own PR going forward.

[kriscoleman]

5. Storagebox garage-setup ImagePullBackOff

Problem: The helm install storagebox step was timing out after 10 minutes. The root cause was the storagebox-garage-setup post-install job pod stuck in ImagePullBackOff — the image curlimages/curl:8 doesn't exist. The curlimages/curl registry only publishes full semver tags (e.g. 8.19.0), not short major version tags.

Fix: Updated the garageSetup image tag in applications/storagebox/charts/storagebox/values.yaml from "8" to "8.19.0".

[kriscoleman]

Pre-existing CI failures (not caused by this PR)

After fixing all the issues introduced or exposed by this PR, two test suites remain failing. Both are pre-existing failures on main — they've been broken since March 26-27 and are unrelated to the replicated-sdk version bump.

Storagebox CI — helm-install-test

Broken since: March 26 (PR #111 merged — replaced MinIO with Garage)
Last passing on main: March 25
Root cause: The garage-setup job used curlimages/curl:8 which doesn't exist (fixed in this PR to alpine:3.21), and the smoke tests' port-forward approach doesn't work reliably with the new Garage-based architecture. All 4 component checks (postgres, garage, rqlite, cassandra) fail at the port-forward stage.

MLflow CI — kots-install-test

Broken since: March 27 (PR #140 merged — CI speedup, reduced cluster sizes)
Last passing on main: March 25
Root cause: The KOTS install deploys both infra and mlflow charts. The mlflow pod's wait-for-postgresql init container hangs because the CNPG postgres cluster doesn't provision within the timeout on the reduced single-node k3s clusters. The helm-install-test jobs (which use test values with postgres.embedded.instances: 1) pass fine.

Both of these need separate fixes outside the scope of this SDK bump PR.