Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Config Migration Needed

• Select this checkbox to let Renovate create an automated Config Migration PR.

Rate-Limited

These updates are currently rate-limited. Click on a checkbox below to force their creation now.

• chore(deps): update github.com/opencontainers/go-digest digest to 1e56c6d
• chore(deps): update alpine docker tag to v3.21.3
• chore(deps): update module github.com/google/go-containerregistry to v0.20.3
• chore(deps): update module github.com/onsi/gomega to v1.36.2
• chore(deps): update module github.com/otiai10/copy to v1.14.1
• chore(deps): update module github.com/sethvargo/go-envconfig to v1.1.1
• chore(deps): update module github.com/sigstore/sigstore to v1.8.15
• chore(deps): update module github.com/spf13/pflag to v1.0.6
• chore(deps-dev): update shogo82148/actions-goveralls action to v1.9.1
• chore(deps-dev): update zgosalvez/github-actions-ensure-sha-pinned-actions action to v3.0.22
• chore(deps): update module github.com/cyphar/filepath-securejoin to v0.4.1
• chore(deps): update module github.com/docker/cli to v27.5.1+incompatible
• chore(deps): update module github.com/fluxcd/helm-controller/api to v1.2.0
• chore(deps): update module github.com/fluxcd/pkg/version to v0.6.0
• chore(deps): update module github.com/fluxcd/source-controller/api to v1.5.0
• chore(deps): update module golang.org/x/sync to v0.11.0
• chore(deps): update module helm.sh/helm/v3 to v3.17.1
• chore(deps): update module sigs.k8s.io/kustomize/kyaml to v0.19.0
• chore(deps-dev): update actions/setup-go action to v5.3.0
• chore(deps-dev): update actions/stale action to v9.1.0
• chore(deps-dev): update actions/upload-artifact action to v4.6.0
• chore(deps-dev): update anchore/sbom-action action to v0.18.0
• chore(deps-dev): update github/codeql-action action to v3.28.9
• chore(deps-dev): update goreleaser/goreleaser-action action to v6.2.1
• chore(deps-dev): update sigstore/cosign-installer action to v3.8.0
• chore(deps-dev): update step-security/harden-runner action to v2.11.0
• chore(deps): update module github.com/docker/cli to v28
• 🔐 Create all rate-limited PRs at once 🔐

Pending Status Checks

These updates await pending status checks. To force their creation now, click the checkbox below.

• chore(deps-dev): update ossf/scorecard-action action to v2.4.1

Open

These updates have all been created already. Click a checkbox below to force a retry/rebase of any.

• chore(deps-dev): update actions/checkout digest to 11bd719
• chore(deps-dev): update pascalgn/size-label-action digest to 6ec5bd0
• chore(deps): update module github.com/sigstore/cosign/v2 to v2.4.3
• chore(deps): update dependency go to v1.24.0
• chore(deps): update kubernetes packages to v0.32.2 (k8s.io/api, k8s.io/apiextensions-apiserver, k8s.io/apimachinery)
• chore(deps): update module github.com/fluxcd/pkg/apis/kustomize to v1.9.0
• chore(deps): update module github.com/fluxcd/pkg/oci to v0.45.0
• chore(deps): update module github.com/fluxcd/pkg/runtime to v0.53.1
• chore(deps): update module sigs.k8s.io/kustomize/api to v0.19.0
• chore(deps): update module github.com/alitto/pond to v2
• Click on this checkbox to rebase all open PRs at once

Detected dependencies

dockerfile

Dockerfile

• alpine 3.21.0@sha256:21dc6063fd678b478f57c0e13f47560d0ea4eeba26dfc947b2a4f81f686b9f45

github-actions

.github/workflows/main.yaml

• step-security/harden-runner v2.10.2@0080882f6c36860b6ba35c610c98ce87d4e2f26f
• actions/checkout v4@692973e3d937129bcbf40652eb9f2f61becf3332
• actions/setup-go v5.1.0@41dfa10bad2bb2ae585af6ee5bb4d7d973ad74ed
• shogo82148/actions-goveralls v1.9.0@785c9d68212c91196d3994652647f8721918ba11

.github/workflows/pr-actions.yaml

• step-security/harden-runner v2.10.2@0080882f6c36860b6ba35c610c98ce87d4e2f26f
• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• zgosalvez/github-actions-ensure-sha-pinned-actions v3.0.18@64418826697dcd77c93a8e4a1f7601a1942e57b5

.github/workflows/pr-build.yaml

• step-security/harden-runner v2.10.2@0080882f6c36860b6ba35c610c98ce87d4e2f26f
• actions/checkout v4@692973e3d937129bcbf40652eb9f2f61becf3332
• actions/setup-go v5.1.0@41dfa10bad2bb2ae585af6ee5bb4d7d973ad74ed
• chrisdickinson/setup-yq v1.0.1@3d931309f27270ebbafd53f2daee773a82ea1822
• shogo82148/actions-goveralls v1.9.0@785c9d68212c91196d3994652647f8721918ba11

.github/workflows/pr-goreleaser.yaml

• step-security/harden-runner v2.10.2@0080882f6c36860b6ba35c610c98ce87d4e2f26f
• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• goreleaser/goreleaser-action v6.1.0@9ed2f89a662bf1735a48bc8557fd212fa902bebf

.github/workflows/pr-label.yaml

• step-security/harden-runner v2.10.2@0080882f6c36860b6ba35c610c98ce87d4e2f26f
• pascalgn/size-label-action 49850f3557d4b77f0b2e759829defd77ccc07c54

.github/workflows/pr-stale.yaml

• actions/stale v9.0.0@28ca1036281a5e5922ead5184a1bbf96e5fc984e

.github/workflows/pr-trivy.yaml

• step-security/harden-runner v2.10.2@0080882f6c36860b6ba35c610c98ce87d4e2f26f
• aquasecurity/trivy-action 0.29.0@18f2510ee396bbf400402947b394f2dd8c87dbb0
• github/codeql-action v3.27.9@df409f7d9260372bd5f19e5b04e83cb3c43714ae

.github/workflows/publish-release.yaml

• Actions-R-Us/actions-tagger v2.0.3@330ddfac760021349fef7ff62b372f2f691c20fb

.github/workflows/rebase.yaml

• step-security/harden-runner v2.10.2@0080882f6c36860b6ba35c610c98ce87d4e2f26f
• actions/checkout v4@692973e3d937129bcbf40652eb9f2f61becf3332
• cirrus-actions/rebase 1.8@b87d48154a87a85666003575337e27b8cd65f691

.github/workflows/release.yaml

• step-security/harden-runner v2.10.2@0080882f6c36860b6ba35c610c98ce87d4e2f26f
• actions/checkout v4@692973e3d937129bcbf40652eb9f2f61becf3332
• actions/setup-go v5.1.0@41dfa10bad2bb2ae585af6ee5bb4d7d973ad74ed
• docker/login-action v3.3.0@9780b0c442fbb1117ed29e0efdff1e18412f7567
• sigstore/cosign-installer v3.7.0@dc72c7d5c4d10cd6bcb8cf6e3fd625a9e5e537da
• anchore/sbom-action v0.17.9@df80a981bc6edbc4e220a492d3cbe9f5547a6e75
• goreleaser/goreleaser-action v6.1.0@9ed2f89a662bf1735a48bc8557fd212fa902bebf

.github/workflows/report-on-vulnerabilities.yaml

• step-security/harden-runner v2.10.2@0080882f6c36860b6ba35c610c98ce87d4e2f26f
• aquasecurity/trivy-action 0.29.0@18f2510ee396bbf400402947b394f2dd8c87dbb0
• actions/upload-artifact v4.4.3@b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882
• step-security/harden-runner v2.10.2@0080882f6c36860b6ba35c610c98ce87d4e2f26f
• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/download-artifact v4.1.8@fa0a91b85d4f404e444e00e005971372dc801d16
• JasonEtco/create-an-issue v2.9.2@1b14a70e4d8dc185e5cc76d3bec9eab20257b2c5

.github/workflows/scan.yaml

• step-security/harden-runner v2.10.2@0080882f6c36860b6ba35c610c98ce87d4e2f26f
• actions/checkout v4@692973e3d937129bcbf40652eb9f2f61becf3332
• github/codeql-action codeql-bundle-20221020@f0a12816612c7306b485a22cb164feb43c6df818
• github/codeql-action codeql-bundle-20221020@f0a12816612c7306b485a22cb164feb43c6df818
• github/codeql-action codeql-bundle-20221020@f0a12816612c7306b485a22cb164feb43c6df818

.github/workflows/scorecard.yaml

• step-security/harden-runner v2.10.2@0080882f6c36860b6ba35c610c98ce87d4e2f26f
• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• ossf/scorecard-action v2.4.0@62b2cac7ed8198b15735ed49ab1e5cf35480ba46
• actions/upload-artifact v4.4.3@b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882
• github/codeql-action v3.27.9@df409f7d9260372bd5f19e5b04e83cb3c43714ae

gomod

go.mod

• go 1.22.6
• go 1.22.7
• github.com/Masterminds/semver/v3 v3.3.1
• github.com/alitto/pond v1.9.2
• github.com/cyphar/filepath-securejoin v0.3.5
• github.com/docker/cli v27.4.0+incompatible
• github.com/drone/envsubst v1.0.3
• github.com/fluxcd/helm-controller/api v1.1.0
• github.com/fluxcd/pkg/apis/kustomize v1.6.1
• github.com/fluxcd/pkg/oci v0.41.1
• github.com/fluxcd/pkg/runtime v0.49.1
• github.com/fluxcd/pkg/version v0.4.1
• github.com/fluxcd/source-controller/api v1.4.1
• github.com/go-logr/logr v1.4.2
• github.com/go-logr/zapr v1.3.0
• github.com/gofrs/flock v0.12.1
• github.com/google/go-containerregistry v0.20.2
• github.com/onsi/gomega v1.36.1
• github.com/opencontainers/go-digest v1.0.0
• github.com/otiai10/copy v1.14.0
• github.com/sethvargo/go-envconfig v1.1.0
• github.com/sigstore/cosign/v2 v2.4.0
• github.com/sigstore/sigstore v1.8.11
• github.com/spf13/pflag v1.0.5
• go.uber.org/zap v1.27.0
• golang.org/x/sync v0.10.0
• helm.sh/helm/v3 v3.16.3
• k8s.io/api v0.31.3
• k8s.io/apiextensions-apiserver v0.31.3
• k8s.io/apimachinery v0.31.3
• k8s.io/helm v2.17.0+incompatible
• sigs.k8s.io/kustomize/api v0.17.3
• sigs.k8s.io/kustomize/kyaml v0.17.2
• sigs.k8s.io/yaml v1.4.0
• github.com/opencontainers/go-digest v1.0.1-0.20231025023718-d50d2fec9c98@d50d2fec9c98
• sigs.k8s.io/kustomize/api v0.17.3
• sigs.k8s.io/kustomize/kyaml v0.17.2

helm-requirements

internal/helm/testdata/charts/helmchartwithdeps-v1/requirements.yaml

helm-values

internal/helm/testdata/charts/helmchart-v1/values.yaml

internal/helm/testdata/charts/helmchartwithdeps-v1/values.yaml

helmv3

internal/helm/testdata/charts/helmchartwithdeps/Chart.yaml

• grafana >=5.7.0

homebrew

Formula/flux-build.rb

• DoodleScheduling/flux-build v3.0.9

---

• Check this box to trigger a request for Renovate to run again on this repository