build(helm): update keda to 2.19.0

[ocfbot]

This PR contains the following updates:

Package	Update	Change
keda	minor	2.17.2 -> 2.19.0

---

Release Notes

kedacore/keda (keda)

v2.19.0

Compare Source

New

• General: Add file-based authentication support for ClusterTriggerAuthentication (#​7083)
• General: Introduce new Kubernetes Resource Scaler (#​7212)

Improvements

• General: Correct error message when awsSecretAccessKey is missing in credential-based authentication (#​7265)
• General: Emit more events about what is happening with ScaledObject/ScaledJob (#​7382)
• General: Raw metrics stream - include trigger activity status in response (#​7369)
• AWS CloudWatch Scaler: Add cross-account observability support (#​7189)
• Dynamodb Scaler: Add FilterExpression support (#​7102)
• Dynatrace Scaler: Support DQL querying (#​7377)
• MongoDB Scaler: Add TLS support (#​6976)

Fixes

• General: Apply fallback in polling loop to enable scaling from zero (#​7239)
• General: Fix accurateScalingStrategy ignoring pendingJobCount in maxReplicaCount check (#​7329)
• General: Replace deprecated azure autorest dependency to azure sdk for go (#​7073)
• Datadog Scaler: Return request in cluster agent proxy without bearer auth (#​7341)
• Datadog Scaler: Use metricUnavailableValue for 422 errors in Datadog Cluster Agent (#​7246)
• IBMMQ Scaler: Create new HTTP request for each queue query in IBMMQ scaler (#​7202)
• Kafka Scaler: Improve check for missing partition information when calculating lag (#​7414)
• Temporal Scaler: Fix TLS RootCAs initialization when using API key authentication with Temporal Cloud (#​7367)

Deprecations

You can find all deprecations in this overview and join the discussion here.

Breaking Changes

• NATS Streaming scaler: Remove NATS Streaming Server (aka Stan) (#​6366)

Other

• CI: Replace stale bot with official GitHub Actions stale action (#​7321)
• CI: Use GitHub-hosted ARM64 runners (#​7293)
• ScaledObject/ScaledJob: Track activity for each trigger in the status (#​7347)

v2.18.3

Compare Source

• General: Fix CVE-2025-68476 (#​7334)

Fixes

v2.18.2

Compare Source

Fixes

• General: Fix HPA behavior not restored when paused-scale-in/out annotation is deleted without corresponding custom behavior (#​7291)
• General: Fix nil reference panic when transfer-hpa-ownership is set but no hpa name is provided (#​7254)
• General: Fix race condition in paused-replicas annotation causing ScaledObject to get stuck (#​7231)
• General: Fix ScaledObject controller error handling for requestScaleLoop (#​7273)
• General: Remove unnecessary scaledObjectMetricSpecs variable in HPA (#​7292)
• General: Use TriggerError when all ScaledJob triggers fail (#​7205)
• ActiveMQ Scaler: Correct parse error ActiveMQ (#​7245)
• Datadog Scaler: Fix metricUnavailableValue parameter not working (#​7238)

v2.18.1

Compare Source

Fixes

• General: Add feature flag KEDA_CHECK_UNEXPECTED_SCALERS_PARAMS for checking unexpected scaler parameters (#​6721)
• General: Fix incorrect 'unmatched input property' notification (#​7174)
• Kafka Scaler: Fix missing error returns in error handling (#​7182)

Other

• General: Raw metrics stream - send also metrics during ScaledObject's interval (#​7197)

v2.18.0

Compare Source

New

• General: Add fallback support for triggers of Value metric type (#​6655)
• General: Add support for Force Activation annotation (#​6903)
• General: Add support for pause scale in annotation (#​6902)
• General: Add support for pause scale out annotation (#​7022)
• General: Enable support on s390x for KEDA (#​6543)
• General: Introduce new Forgejo Scaler (#​6488)
• General: Introduce new Solace Direct Messaging scaler (#​6545)
• General: Introduce new SolarWinds Scaler (#​6576)
• General: Introduce new Splunk Observability Cloud Scaler (#​7152)
• General: Introduce new Sumo Logic Scaler (#​6734)
• General: Support for declarative e2e test setup and filtering (#​6989)
• General: Trigger Schema Generated Tool (#​6345)
• General: Vault authentication via cross-namespace service accounts (#​6153)

Improvements

• General: Add error and event for mismatching input property (#​6721)
• General: Allow excluding labels from being propagated from ScaledObject and ScaledJob to generated HPA and Job objects (#​6849)
• General: Improve Events emitted from ScaledObject controller (#​6802)
• General: Only add webhook DNS names when webhook patching is enabled (#​7002)
• Apache Kafka Scaler: Add support for even distribution of partitions to consumers (#​2581)
• Artemis Scaler: Add TLS support with client certificates for secure HTTPS connections (#​6448)
• AWS CloudWatch Scaler: Add support for CloudWatch extended statistics (e.g P99 / TM90 and etc) (#​7109)
• Azure Pipelines Scaler: Ability to enable case-insensitive comparison of pipeline job demands (#​7111)
• Azure Pipelines Scaler: Ability to fetch only unfinished pipeline jobs for a pool (#​6819)
• Datadog Scaler: Add a specific timeout configuration parameter for the Datadog trigger (#​6999)
• Datadog Scaler: Improve Datadog scaler error messages (#​6999)
• Github Scaler: Add support to control unlabeled job/runner matching (#​6900)
• InfluxDB Scaler: Add support for InfluxDB v3 (#​6981)
• Kafka Scaler: Add support for even distribution of partitions to consumers (#​2581)
• Metrics API scaler: Introduce new aggregateFromKubeServiceEndpoints and aggregationType metadata fields to metrics-api so it is able to fetch metrics from all endpoints behind a kubernetes service and aggregate them (#​6565)
• Metrics API Scaler: Support AuthParams for authMode (#​6939)
• Metrics API Scaler: Support multiple auth methods simultaneously (#​6642)
• RabbitMQ Scaler: add DeliverGetRate, PublishedToDeliveredRatio and ExpectedQueueConsumptionTime trigger modes to RabbitMQ scaler (#​7071)
• Solace Scaler: Add hostlist support for Solace brokers (#​7090)
• Temporal Scaler: Always set temporal-namespace header on requests(#​7079)
• Temporal Scaler: Support custom tlsServerName (#​6820)

Fixes

• General: Add missing omitempty json tags in the AuthPodIdentity struct (#​6779)
• General: Correct pending pod condition logic for ScaledJobs (#​6727)
• General: Fix external push scaler deactivation behavior (#​6986)
• General: Fix parse timeout config as milliseconds instead of seconds (#​6997)
• General: Fix prefixes on envFrom elements in a deployment spec aren't being interpreted and Environment variables are not prefixed with the prefix (#​6728)
• General: Fix SIGSEGV when doing fallback of non-static behavior on any ScaleTargetRef that is neither a Deployment nor a StatefulSet (#​6992)
• General: New Scaled{Object,Job} has paused condition in their status as False instead of Unknown (#​7011)
• General: Remove klogr dependency and replace with zap (#​5732)
• General: Resolve race condition when removing paused-replicas annotation from ScaledObject (#​6982)
• General: Sets hpaName in Status when ScaledObject adopts/finds an existing HPA (#​6336)
• Cron Scaler: Fix cron scaler to return zero metric value by default(#​6886)
• Datadog Scaler: Fix bug with datadogNamespace config (#​6828)
• Hashicorp Vault: Fix Vault PKI param using camel case param when making API call to Vault PKI endpoint (#​6864)
• Kafka Scaler: Fix throwing error when using sasl=none (#​7061)
• Pulsar Scaler: Resolve nil pointer dereference in Pulsar scaler redirect handling (#​7024)
• RabbitMQ Scaler: Fix incorrect URL encoding in RabbitMQ vhosts containing %2f (#​6963)
• Temporal Scaler: Allow setting 0 for targetQueueSize (#​7113)

Deprecations

You can find all deprecations in this overview and join the discussion here.

New deprecation(s):

• GCP Pub/Sub Scaler: The subscriptionSize setting is DEPRECATED and will be removed in v2.20 - Use mode and value instead (#​6866)
• Huawei Cloudeye Scaler: The minMetricValue setting is DEPRECATED and will be removed in v2.20 - Use activationTargetMetricValue instead (#​6978)

Breaking Changes

• General: Remove Prometheus webhook prommetrics deprecations (#​6698)
• CPU Memory scaler: The type setting is deprecated and removed, use metricType instead (#​6698)
• IBM MQ scaler: The tls setting is deprecated and removed, use unsafeSsl instead (#​6698)

Other

• General: Add gRPC service that allows subscribing to a raw metric values (#​7094)
• General: Bump Controller Runtime version to v0.20.4 (#​7081)
• General: Fix several typos (#​6909)
• General: Replace deprecated webhook.Validator with webhook.CustomValidator (#​6660)
• MSSQL Scaler: Refactor MS SQL e2e test (#​3401)

v2.17.3

Compare Source

• General: Fix CVE-2025-68476 (#​7333)

---

• If you want to rebase/retry this PR, check this box