Signed-off-by: Francesco Giudici <fgiudici@redhat.com>

Bumps [codecov/codecov-action](https://github.com/codecov/codecov-action) from 5 to 6.
- [Release notes](https://github.com/codecov/codecov-action/releases)
- [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md)
- [Commits](codecov/codecov-action@v5...v6)

---
updated-dependencies:
- dependency-name: codecov/codecov-action
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Bumps [go.podman.io/image/v5](https://github.com/containers/container-libs) from 5.39.1 to 5.39.2.
- [Release notes](https://github.com/containers/container-libs/releases)
- [Commits](podman-container-tools/container-libs@image/v5.39.1...image/v5.39.2)

---
updated-dependencies:
- dependency-name: go.podman.io/image/v5
  dependency-version: 5.39.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Bumps [go.opentelemetry.io/otel/sdk](https://github.com/open-telemetry/opentelemetry-go) from 1.40.0 to 1.43.0.
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go@v1.40.0...v1.43.0)

---
updated-dependencies:
- dependency-name: go.opentelemetry.io/otel/sdk
  dependency-version: 1.43.0
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Signed-off-by: grokspawn <jordan@nimblewidget.com>

Bumps [github.com/google/cel-go](https://github.com/google/cel-go) from 0.27.0 to 0.28.0.
- [Release notes](https://github.com/google/cel-go/releases)
- [Commits](google/cel-go@v0.27.0...v0.28.0)

---
updated-dependencies:
- dependency-name: github.com/google/cel-go
  dependency-version: 0.28.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Bumps the k8s-dependencies group with 4 updates: [k8s.io/api](https://github.com/kubernetes/api), [k8s.io/apiextensions-apiserver](https://github.com/kubernetes/apiextensions-apiserver), [k8s.io/apimachinery](https://github.com/kubernetes/apimachinery) and [k8s.io/client-go](https://github.com/kubernetes/client-go).


Updates `k8s.io/api` from 0.35.3 to 0.35.4
- [Commits](kubernetes/api@v0.35.3...v0.35.4)

Updates `k8s.io/apiextensions-apiserver` from 0.35.3 to 0.35.4
- [Release notes](https://github.com/kubernetes/apiextensions-apiserver/releases)
- [Commits](kubernetes/apiextensions-apiserver@v0.35.3...v0.35.4)

Updates `k8s.io/apimachinery` from 0.35.3 to 0.35.4
- [Commits](kubernetes/apimachinery@v0.35.3...v0.35.4)

Updates `k8s.io/client-go` from 0.35.3 to 0.35.4
- [Changelog](https://github.com/kubernetes/client-go/blob/master/CHANGELOG.md)
- [Commits](kubernetes/client-go@v0.35.3...v0.35.4)

---
updated-dependencies:
- dependency-name: k8s.io/api
  dependency-version: 0.35.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: k8s-dependencies
- dependency-name: k8s.io/apiextensions-apiserver
  dependency-version: 0.35.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: k8s-dependencies
- dependency-name: k8s.io/apimachinery
  dependency-version: 0.35.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: k8s-dependencies
- dependency-name: k8s.io/client-go
  dependency-version: 0.35.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: k8s-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Bumps [github.com/google/cel-go](https://github.com/google/cel-go) from 0.28.0 to 0.28.1.
- [Release notes](https://github.com/google/cel-go/releases)
- [Commits](google/cel-go@v0.28.0...v0.28.1)

---
updated-dependencies:
- dependency-name: github.com/google/cel-go
  dependency-version: 0.28.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Bumps [go.podman.io/image/v5](https://github.com/containers/container-libs) from 5.39.2 to 5.40.0.
- [Release notes](https://github.com/containers/container-libs/releases)
- [Commits](podman-container-tools/container-libs@image/v5.39.2...image/v5.40.0)

---
updated-dependencies:
- dependency-name: go.podman.io/image/v5
  dependency-version: 5.40.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

…493)

Signed-off-by: Todd Short <tshort@redhat.com>

…les (#496)

* fix: stop emitting false-positive deprecated-API warnings for RBAC rules

RBAC PolicyRules only specify apiGroups and resources, not versions.
The deprecatedGroupResource map was flagging any RBAC rule that
referenced a group+resource combination where a beta version had been
removed, even when a stable version still exists in the same group.

This produced false-positive warnings for operators that use stable
APIs like batch/v1 CronJob, autoscaling/v2 HPA, events.k8s.io/v1
Event, policy/v1 PDB, discovery.k8s.io/v1 EndpointSlice, and
node.k8s.io/v1 RuntimeClass.

Remove these entries from the deprecatedGroupResource map since RBAC
rules for them are valid. Keep only PodSecurityPolicy, which was
entirely removed in v1.25 with no stable replacement in the policy
group.

The deprecatedGvk check (for actual versioned manifests in the bundle)
is unaffected and continues to correctly flag deprecated objects.

Fixes #378

Signed-off-by: Sebastien Tardif <sebtardif@ncf.ca>

* refactor: rename deprecatedGroupResource to removedGroupResource

Rename identifiers to match actual semantics: this map tracks
resources entirely removed from their API group, not merely
deprecated. Renames deprecatedGroupResource -> removedGroupResource
and warnIfDeprecated -> warnIfRemoved.

Suggested-by: Copilot
Requested-by: perdasilva
Signed-off-by: Sebastien Tardif <sebtardif@ncf.ca>

---------

Signed-off-by: Sebastien Tardif <sebtardif@ncf.ca>