chore: Release stackable-operator 0.109.0 (and others)

[sbernauer]

stackable-operator [0.109.0] - 2026-04-07

Added

• Git sync: add support for CAs (#1154).
• Add support for specifying a clientAuthenticationMethod for OIDC (#1178).
  This was originally done in [feat: add support for specifying a clientAuthenticationMethod for OIDC #1158] and had been reverted in [revert: Add support for specifying a clientAuthenticationMethod for OIDC #1170].
• Implement Deref for kvp::Key to be more ergonomic to use (#1182).
• Add create_random_secret_if_not_exists function, which create a random Secret in case it doesn't already exist.
  It notably also fixes a bug we had in trino and airflow-operator, where we created immutable Secrets,
  which lead to problems (#1187).

Changed

• Bump stackable-versioned to 0.9.0, refer to its changelog (#1189).

• Bump stackable-webhook to 0.9.1, refer to its changelog (#1189).

• BREAKING: Add mandatory provision_parts argument to SecretOperatorVolumeSourceBuilder::new (#1165).
  It now forces the caller to make an explicit choice if the public parts are sufficient or if private
  (e.g. a certificate for the Pod) parts are needed as well. This is done to avoid accidentally requesting
  too much parts. For details see this issue.

  Additionally, SecretClassVolume::to_volume and SecretClassVolume::to_ephemeral_volume_source
  also take the same new argument.

Removed

• BREAKING: Remove unused add_prefix, try_add_prefix, set_name, and try_set_name associated
  functions from kvp::Key to disallow mutable access to inner values (#1182).

stackable-versioned [0.9.0] - 2026-04-07

Added

• Add support to override kube crate (#1173).
• Add support to provide #[versioned(crd(scale(...)))] argument to enable the /scale subresource (#1185).

stackable-webhook [0.9.1] - 2026-04-07

Changed

• Check for certificate rotation every 5 minutes to prevent expiry due to monotonic and wall clock divergence (#1175).

[razvan]

🚂