bump deps and pin k8s.io to 0.28.5

[zroubalik]

Checklist

• Changelog has been updated and is aligned with our changelog requirements
• Commits are signed with Developer Certificate of Origin (DCO - learn more)

[github-actions]

Thank you for your contribution! 🙏 We will review your PR as soon as possible.

While you are waiting, make sure to:

• Add an entry in our changelog in alphabetical order and link related issue
• Update the documentation, if needed
• Add unit & e2e tests for your changes
• GitHub checks are passing
• Is the DCO check failing? Here is how you can fix DCO issues

Learn more about:

• Our contribution guide

[zroubalik]

/run-e2e
Update: You can check the progress here

[JorTurFer]

FOSSA issue:

[zroubalik]

FOSSA issue:

This transitive dependency is a dual licensed library. Licensed under BSD a GPLv2 licenses. If we assume that we are gonna use the BSD (which is a permissive open source license), then I think that we are good with ignoring this warning and proceed. But I am not a licensing expert nor lawyer :)

Thoughts? @kedacore/keda-maintainers @joelsmith

Our dependency: https://github.com/DataDog/datadog-api-client-go
The transitive dependency causing problems: https://github.com/DataDog/zstd

[JorTurFer]

FOSSA issue:

This transitive dependency is a dual licensed library. Licensed under BSD a GPLv2 licenses. If we assume that we are gonna use the BSD (which is a permissive open source license), then I think that we are good with ignoring this warning and proceed. But I am not a licensing expert nor lawyer :)

Thoughts? @kedacore/keda-maintainers @joelsmith

Our dependency: DataDog/datadog-api-client-go The transitive dependency causing problems: DataDog/zstd

yes, you're right! I've updated FOSSA adding an exception for this

[JorTurFer]

but static checks and e2e tests are failing too

[zroubalik]

/run-e2e
Update: You can check the progress here