Backport patch-safe fixes for v0.1.1

[thomasmaas]

Summary

Cherry-picked patch-safe fixes from main for the v0.1.1 patch release (Kuadrant 1.4.4).

The release-0.1 branch was created from release-v0.1 as part of the RFC 0018 migration.

Changes

• Go 1.25.5 → 1.25.9 — aligns with all other Kuadrant 1.4.4 components
• gRPC-Go → 1.79.3 — dependency upgrade
• fix: do not set latest tag for tag events — CI fix preventing accidental latest image tag on release builds

Skipped (depend on features added after v0.1.0)

• nil-checks for nested pointer fields (apikey_secret_controller.go — file doesn't exist at v0.1.0)
• Orphaned enforcement secrets cleanup (same file)
• GH Actions security fixes (composite actions don't exist at v0.1.0)
• APIKeyRequest naming pattern change (feature)

Test plan

• CI passes on the release-0.1 branch

🤖 Generated with Claude Code

[coderabbitai]

Important

Review skipped

Auto reviews are disabled on base/target branches other than the default branch.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro

Run ID: f4d49f17-34ae-4583-8896-8add3c189718

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch backport-0.1.1-patches

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands and usage tips.}