fix(deps): update module github.com/kedacore/keda/v2 to v2.19.0

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
github.com/kedacore/keda/v2	v2.18.3 → v2.19.0

---

Release Notes

kedacore/keda (github.com/kedacore/keda/v2)

v2.19.0

Compare Source

New

• General: Add file-based authentication support for ClusterTriggerAuthentication (#​7083)
• General: Introduce new Kubernetes Resource Scaler (#​7212)

Improvements

• General: Correct error message when awsSecretAccessKey is missing in credential-based authentication (#​7265)
• General: Emit more events about what is happening with ScaledObject/ScaledJob (#​7382)
• General: Raw metrics stream - include trigger activity status in response (#​7369)
• AWS CloudWatch Scaler: Add cross-account observability support (#​7189)
• Dynamodb Scaler: Add FilterExpression support (#​7102)
• Dynatrace Scaler: Support DQL querying (#​7377)
• MongoDB Scaler: Add TLS support (#​6976)

Fixes

• General: Apply fallback in polling loop to enable scaling from zero (#​7239)
• General: Fix accurateScalingStrategy ignoring pendingJobCount in maxReplicaCount check (#​7329)
• General: Replace deprecated azure autorest dependency to azure sdk for go (#​7073)
• Datadog Scaler: Return request in cluster agent proxy without bearer auth (#​7341)
• Datadog Scaler: Use metricUnavailableValue for 422 errors in Datadog Cluster Agent (#​7246)
• IBMMQ Scaler: Create new HTTP request for each queue query in IBMMQ scaler (#​7202)
• Kafka Scaler: Improve check for missing partition information when calculating lag (#​7414)
• Temporal Scaler: Fix TLS RootCAs initialization when using API key authentication with Temporal Cloud (#​7367)

Deprecations

You can find all deprecations in this overview and join the discussion here.

Breaking Changes

• NATS Streaming scaler: Remove NATS Streaming Server (aka Stan) (#​6366)

Other

• CI: Replace stale bot with official GitHub Actions stale action (#​7321)
• CI: Use GitHub-hosted ARM64 runners (#​7293)
• ScaledObject/ScaledJob: Track activity for each trigger in the status (#​7347)

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • Between 12:00 AM and 03:59 AM, only on Monday (* 0-3 * * 1)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

• any of the package files in this branch needs updating, or
• the branch becomes conflicted, or
• you click the rebase/retry checkbox if found above, or
• you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: go.sum

Command failed: go get -t ./...
go: module github.com/kedacore/keda/v2@v2.19.0 requires go >= 1.25.6; switching to go1.25.10
go: downloading go1.25.10 (linux/amd64)
go: downloading k8s.io/client-go v1.5.2
go: downloading sigs.k8s.io/controller-runtime v0.23.1
go: downloading k8s.io/api v0.35.0
go: downloading k8s.io/apimachinery v0.35.0
go: downloading github.com/kedacore/keda/v2 v2.19.0
go: downloading google.golang.org/protobuf v1.36.11
go: downloading github.com/prometheus/common v1.20.99
go: downloading sigs.k8s.io/structured-merge-diff/v6 v6.3.2-0.20260122202528-d9cc6641c482
go: downloading k8s.io/klog/v2 v2.130.1
go: downloading knative.dev/pkg v0.0.0-20260120122510-4a022ed9999a
go: downloading k8s.io/apiserver v0.35.0
go: downloading k8s.io/kube-openapi v0.0.0-20260127142750-a19766b6e2d4
go: downloading github.com/grafana/regexp v0.0.0-20250905093917-f7b3be9d1853
go: downloading k8s.io/component-base v0.35.0
go: downloading github.com/fsnotify/fsnotify v1.9.0
go: downloading k8s.io/apiextensions-apiserver v0.35.0
go: downloading github.com/go-openapi/jsonreference v0.21.4
go: downloading github.com/go-openapi/swag v0.25.4
go: downloading github.com/fxamacker/cbor/v2 v2.9.0
go: downloading github.com/google/cel-go v0.27.0
go: downloading github.com/google/btree v1.1.3
go: downloading github.com/go-openapi/jsonpointer v0.22.4
go: downloading github.com/go-openapi/swag/cmdutils v0.25.4
go: downloading github.com/go-openapi/swag/conv v0.25.4
go: downloading github.com/go-openapi/swag/fileutils v0.25.4
go: downloading github.com/go-openapi/swag/jsonname v0.25.4
go: downloading github.com/go-openapi/swag/jsonutils v0.25.4
go: downloading github.com/go-openapi/swag/loading v0.25.4
go: downloading github.com/go-openapi/swag/mangling v0.25.4
go: downloading github.com/go-openapi/swag/netutils v0.25.4
go: downloading github.com/go-openapi/swag/stringutils v0.25.4
go: downloading github.com/go-openapi/swag/typeutils v0.25.4
go: downloading github.com/go-openapi/swag/yamlutils v0.25.4
go: k8s.io/client-go@v0.36.0 requires go >= 1.26.0 (running go 1.25.10)
go: k8s.io/client-go@v0.36.0 requires go >= 1.26.0 (running go 1.25.10)
go: k8s.io/client-go@v0.36.0 requires go >= 1.26.0 (running go 1.25.10)
go: k8s.io/client-go@v0.36.0 requires go >= 1.26.0 (running go 1.25.10)
go: k8s.io/client-go@v0.36.0 requires go >= 1.26.0 (running go 1.25.10)
go: k8s.io/client-go@v0.36.0 requires go >= 1.26.0 (running go 1.25.10)
go: k8s.io/client-go@v0.36.0 requires go >= 1.26.0 (running go 1.25.10)
go: k8s.io/client-go@v0.36.0 requires go >= 1.26.0 (running go 1.25.10)
go: k8s.io/client-go@v0.36.0 requires go >= 1.26.0 (running go 1.25.10)
go: k8s.io/client-go@v0.36.0 requires go >= 1.26.0 (running go 1.25.10)
go: k8s.io/client-go@v0.36.0 requires go >= 1.26.0 (running go 1.25.10)
go: k8s.io/client-go@v0.36.0 requires go >= 1.26.0 (running go 1.25.10)
go: k8s.io/client-go@v0.36.0 requires go >= 1.26.0 (running go 1.25.10)
go: k8s.io/client-go@v0.36.0 requires go >= 1.26.0 (running go 1.25.10)
go: k8s.io/client-go@v0.36.0 requires go >= 1.26.0 (running go 1.25.10)
go: k8s.io/client-go@v0.36.0 requires go >= 1.26.0 (running go 1.25.10)
go: k8s.io/client-go@v0.36.0 requires go >= 1.26.0 (running go 1.25.10)
go: k8s.io/client-go@v0.36.0 requires go >= 1.26.0 (running go 1.25.10)
go: k8s.io/client-go@v0.36.0 requires go >= 1.26.0 (running go 1.25.10)
go: k8s.io/client-go@v0.36.0 requires go >= 1.26.0 (running go 1.25.10)
go: k8s.io/client-go@v0.36.0 requires go >= 1.26.0 (running go 1.25.10)
go: k8s.io/client-go@v0.36.0 requires go >= 1.26.0 (running go 1.25.10)

[snyk-io]

⛔ Snyk checks have failed. 1 issues have been found so far.

Status	Scan Engine	Critical	High	Medium	Low	Total (1)
⛔	Open Source Security	0	0	1	0	1 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

[linkvt]

KEDA 2.19.0 reintroduced some retracted dependency versions, we either have to overwrite or wait for the .1 release.
See kedacore/keda#7513

[Copilot]

Copilot encountered an error and was unable to review this pull request. You can try again by re-requesting a review.