Update kargo Docker tag to v1.10.4

[renovate]

This PR contains the following updates:

Package	Update	Change
kargo	patch	1.10.2 → 1.10.4

---

Release Notes

akuity/kargo (kargo)

v1.10.4

Compare Source

🔧 Kargo v1.10.4 brings a focused set of bug fixes, performance improvements, and a meaningful new enhancement to controller observability.

🐛 Bug Fixes

• Login failures for users with diacritics in their name (#​6189): Users whose OIDC
  familyName contained accented characters (e.g. umlauts, diacritics) could be silently
  logged out. JWTs use base64URL encoding, not standard base64 — certain byte sequences
  were failing to decode. The UI now correctly uses base64URL for JWT parsing.

• ForeignFieldError on Warehouse watch events in the UI (#​6209): The UI was applying a
  redundant transformation to Warehouse subscription data in watch stream handlers, causing a
  ForeignFieldError on deserialization. Removing the duplicate step resolves the error.

• Freight clone missing artifacts in the assembly UI (#​6246): When cloning an existing piece of
  Freight to assemble a new one, artifacts that had aged out of the Warehouse's
  discoveredArtifacts rolling window were not shown as selectable options. The assembly UI now
  ensures any artifacts from the source Freight that are absent from discovered results are
  included, so users can always select the original versions.

• Freight timeline scroll on right caret click (#​6269): The freight timeline now reliably
  scrolls when the right caret is clicked.

⚡ Performance Improvements

• Management controller RBAC efficiency (#​6194, #​6210): The project and service account
  management controllers were performing unnecessary RBAC writes on every reconciliation.
  Two improvements address this: switching from a Create → AlreadyExists → Update pattern
  to server-side apply (eliminating a high volume of 409 errors in clusters with many
  projects), and skipping RBAC re-ensures when nothing has changed. Together these
  significantly reduce API server load.

• UI reduces backend payload with warehouse filtering (#​6161): The UI now passes active
  warehouse filters to the backend when querying Freight and Stages, so the server-side filter
  applies to the initial data fetch rather than filtering client-side. Live watchers are also
  scoped to the active warehouse filter, reducing unnecessary data over watch streams.

✨ Enhancements

• Controller heartbeats and liveness in the UI (#​6184): Kargo controllers now emit
  periodic heartbeats via Kubernetes Lease objects (renewed every 10 seconds and deleted
  on graceful shutdown). A new GET /v1beta1/system/controller-heartbeats endpoint exposes
  the liveness state of all controllers. The UI uses this when loading the pipeline DAG: if a
  Stage's assigned controller has a stale or missing heartbeat, the Stage's synthesized phase
  is shown as Failed with a tooltip explaining that its controller is not responding.

• Pagination shown on single-page stage list (#​6198): Pagination controls now appear
  consistently in the stage list view, even when all stages fit on a single page.

💙 Special Thanks

A warm welcome to first-time contributor @​anaplan-kh, who tracked down and fixed the JWT
base64URL issue that was silently logging out users with diacritics in their name!

Full Changelog: v1.10.3...v1.10.4

v1.10.3

Compare Source

What's Changed

• chore(backport release-1.10): fix(ci): make apko base image build work with nonroot container user by @​akuitybot in #​6182
• chore(backport release-1.10): feat: API support for filtering Stages/Freight by Warehouse names by @​akuitybot in #​6181
• chore(backport release-1.10): refactor: refactor list stages' warehouse filter for consistency by @​akuitybot in #​6183
• chore(backport release-1.10): docs: note label support varies by Git provider in git-open-pr step by @​akuitybot in #​6191
• chore(backport release-1.10): feat(ui): UI perf improvements in the project details by @​akuitybot in #​6195

Full Changelog: akuity/kargo@v1.10.2...v1.10.3

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.