The kube-rbac-proxy image is used to protect the prometheus metrics endpoint. The image is scaffolded by kubebuilder and left for the user to maintain. We have not kept it up to date. While updating to the latest image is easy, we should automate the process via dependabot like all other dependencies, taking responsibility for the image as part of our build/release process.

To my knowledge, dependabot does not have direct support for keeping arbitrary values up to date in a repo, but with a little creativity we should be able to do so.