chore(deps): update dependency defenseunicorns/uds-package-dubbd to v0.16.0

.env

@@ -5,7 +5,7 @@ BUILD_HARNESS_REPO=ghcr.io/defenseunicorns/build-harness/build-harness
 # renovate: datasource=github-tags depName=defenseunicorns/build-harness
 BUILD_HARNESS_VERSION=1.14.12
 # renovate: datasource=github-tags depName=defenseunicorns/uds-package-dubbd
-DUBBD_VERSION=0.14.0
+DUBBD_VERSION=0.16.0
 # renovate: datasource=github-tags depName=defenseunicorns/uds-package-metallb
 METALLB_VERSION=0.0.5
 # renovate: datasource=github-tags depName=defenseunicorns/uds-idam

test/dubbd-values.yaml

@@ -10,13 +10,16 @@ istio:
     tenant:
       tls:
         minProtocolVersion: TLSV1_2
-# See https://github.com/defenseunicorns/uds-sso/issues/38
 kyvernoPolicies:
   values:
     policies:
       require-non-root-user:
+        # This was changed to Enforce by default in BB v2.16.0. We still have it in audit mode to make testing stuff easier.
+        # We recommend changing to "Enforce" in production
+        validationFailureAction: audit
         exclude:
           any:
             - resources:
                 namespaces:
+                  # See https://github.com/defenseunicorns/uds-sso/issues/38
                   - pepr-system