Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Config Migration Needed

• Select this checkbox to let Renovate create an automated Config Migration PR.

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• chore(deps): update module github.com/spf13/pflag to v1.0.10
• chore(deps): update module go.mongodb.org/mongo-driver to v1.17.9
• chore(deps-dev): update actions/checkout action to v4.3.1
• chore(deps-dev): update actions/setup-go action to v5.6.0
• chore(deps-dev): update anchore/sbom-action action to v0.24.0
• chore(deps-dev): update aquasecurity/trivy-action action to v0.35.0
• chore(deps-dev): update dependency python to 3.14
• chore(deps-dev): update docker/login-action action to v3.7.0
• chore(deps-dev): update github/codeql-action action to v3.35.1
• chore(deps-dev): update goreleaser/goreleaser-action action to v6.4.0
• chore(deps-dev): update helm/chart-testing-action action to v2.8.0
• chore(deps-dev): update helm/kind-action action to v1.14.0
• chore(deps-dev): update shogo82148/actions-goveralls action to v1.11.0
• chore(deps-dev): update sigstore/cosign-installer action to v3.10.1
• chore(deps-dev): update step-security/harden-runner action to v2.17.0
• chore(deps): update kubernetes monorepo to v0.35.3 (k8s.io/api, k8s.io/apimachinery, k8s.io/client-go)
• chore(deps): update module github.com/onsi/ginkgo/v2 to v2.28.1
• chore(deps): update module github.com/onsi/gomega to v1.39.1
• chore(deps): update module github.com/testcontainers/testcontainers-go to v0.42.0
• chore(deps-dev): update actions/checkout action to v6
• chore(deps-dev): update actions/setup-go action to v6
• chore(deps-dev): update actions/setup-python action to v6
• chore(deps-dev): update actions/stale action to v10
• chore(deps-dev): update docker/login-action action to v4
• chore(deps-dev): update github artifact actions (major) (actions/download-artifact, actions/upload-artifact)
• chore(deps-dev): update github/codeql-action action to v4
• chore(deps-dev): update goreleaser/goreleaser-action action to v7
• chore(deps-dev): update imranismail/setup-kustomize action to v3
• chore(deps-dev): update sigstore/cosign-installer action to v4
• chore(deps-dev): update zgosalvez/github-actions-ensure-sha-pinned-actions action to v5
• 🔐 Create all rate-limited PRs at once 🔐

Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

• chore(deps): update quay.io/brancz/kube-rbac-proxy docker tag to v0.21.2

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): update module github.com/jackc/pgx/v5 to v5.9.0 [security]
• chore(deps-dev): update actions/checkout digest to 34e1148
• chore(deps-dev): update aquasecurity/trivy-action digest to ad623e1
• chore(deps): update gcr.io/distroless/static:latest docker digest to 47b2d72
• chore(deps-dev): update ossf/scorecard-action action to v2.4.3
• chore(deps-dev): update zgosalvez/github-actions-ensure-sha-pinned-actions action to v3.0.25
• chore(deps): update module github.com/go-logr/logr to v1.4.3
• chore(deps-dev): update dependency go to v1.26.2
• chore(deps): update module github.com/fluxcd/pkg/runtime to v0.103.0
• chore(deps): update module sigs.k8s.io/controller-runtime to v0.23.3
• chore(deps): update module go.mongodb.org/mongo-driver to v2
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

dockerfile (1)

Dockerfile (1)

• gcr.io/distroless/static latest@sha256:ce46866b3a5170db3b49364900fb3168dc0833dfb46c26da5c77f22abb01d8c3 → [Updates: latest]

github-actions (12)

.github/workflows/main.yaml (5)

• step-security/harden-runner v2.12.0@0634a2670c59f64b4a01f0f96f84700a4088b9f0 → [Updates: v2.17.0]
• actions/checkout v4@11bd71901bbe5b1630ceea73d27597364c9af683 → [Updates: v6, v4]
• actions/setup-go v5.4.0@0aaccfd150d50ccaeb58ebd88d36e91967a5f35b → [Updates: v5.6.0, v6.4.0]
• shogo82148/actions-goveralls v1.9.1@e6875f831db61e6abffbd8df91a2eb6cd24b46c9 → [Updates: v1.11.0]
• go 1.22.x → [Updates: 1.26.x]

.github/workflows/pr-actions.yaml (3)

• step-security/harden-runner v2.12.0@0634a2670c59f64b4a01f0f96f84700a4088b9f0 → [Updates: v2.17.0]
• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683 → [Updates: v4.3.1, v6.0.2]
• zgosalvez/github-actions-ensure-sha-pinned-actions v3.0.24@2d6823da4039243036c86d76f503c84e2ded2517 → [Updates: v3.0.25, v5.0.4]

.github/workflows/pr-build.yaml (34)

• step-security/harden-runner v2.12.0@0634a2670c59f64b4a01f0f96f84700a4088b9f0 → [Updates: v2.17.0]
• actions/checkout v4@11bd71901bbe5b1630ceea73d27597364c9af683 → [Updates: v6, v4]
• azure/setup-helm v3.5@5119fcb9089d432beecbf79bb2c7915207344b78
• actions/setup-python v5.6.0@a26af69be951a213d495a4c3e4e4022e16d87065 → [Updates: v6.2.0]
• helm/chart-testing-action v2.7.0@0d28d3144d3a25ea2cc349d6e59901c4ff469b3b → [Updates: v2.8.0]
• step-security/harden-runner v2.12.0@0634a2670c59f64b4a01f0f96f84700a4088b9f0 → [Updates: v2.17.0]
• actions/checkout v4@11bd71901bbe5b1630ceea73d27597364c9af683 → [Updates: v6, v4]
• actions/setup-go v5.4.0@0aaccfd150d50ccaeb58ebd88d36e91967a5f35b → [Updates: v5.6.0, v6.4.0]
• step-security/harden-runner v2.12.0@0634a2670c59f64b4a01f0f96f84700a4088b9f0 → [Updates: v2.17.0]
• actions/checkout v4@11bd71901bbe5b1630ceea73d27597364c9af683 → [Updates: v6, v4]
• actions/setup-go v5.4.0@0aaccfd150d50ccaeb58ebd88d36e91967a5f35b → [Updates: v5.6.0, v6.4.0]
• step-security/harden-runner v2.12.0@0634a2670c59f64b4a01f0f96f84700a4088b9f0 → [Updates: v2.17.0]
• actions/checkout v4@11bd71901bbe5b1630ceea73d27597364c9af683 → [Updates: v6, v4]
• actions/setup-go v5.4.0@0aaccfd150d50ccaeb58ebd88d36e91967a5f35b → [Updates: v5.6.0, v6.4.0]
• actions/upload-artifact v4.6.2@ea165f8d65b6e75b540449e92b4886f43607fa02 → [Updates: v7.0.1]
• step-security/harden-runner v2.12.0@0634a2670c59f64b4a01f0f96f84700a4088b9f0 → [Updates: v2.17.0]
• actions/checkout v4@11bd71901bbe5b1630ceea73d27597364c9af683 → [Updates: v6, v4]
• actions/setup-go v5.4.0@0aaccfd150d50ccaeb58ebd88d36e91967a5f35b → [Updates: v5.6.0, v6.4.0]
• engineerd/setup-kind v0.5.0@aa272fe2a7309878ffc2a81c56cfe3ef108ae7d0
• actions/download-artifact v4.3.0@d3f86a106a0bac45b974a628896c90dbdf5c8093 → [Updates: v8.0.1]
• imranismail/setup-kustomize v2.1.0@2ba527d4d055ab63514ba50a99456fc35684947f → [Updates: v3.0.0]
• step-security/harden-runner v2.12.0@0634a2670c59f64b4a01f0f96f84700a4088b9f0 → [Updates: v2.17.0]
• actions/checkout v4@11bd71901bbe5b1630ceea73d27597364c9af683 → [Updates: v6, v4]
• azure/setup-helm v3.5@5119fcb9089d432beecbf79bb2c7915207344b78
• actions/setup-python v5.6.0@a26af69be951a213d495a4c3e4e4022e16d87065 → [Updates: v6.2.0]
• helm/chart-testing-action v2.7.0@0d28d3144d3a25ea2cc349d6e59901c4ff469b3b → [Updates: v2.8.0]
• helm/kind-action v1.12.0@a1b0e391336a6ee6713a0583f8c6240d70863de3 → [Updates: v1.14.0]
• actions/download-artifact v4.3.0@d3f86a106a0bac45b974a628896c90dbdf5c8093 → [Updates: v8.0.1]
• python 3.13 → [Updates: 3.14]
• go 1.22.x → [Updates: 1.26.x]
• go 1.22.x → [Updates: 1.26.x]
• go 1.22.x → [Updates: 1.26.x]
• go 1.22.x → [Updates: 1.26.x]
• python 3.13 → [Updates: 3.14]

.github/workflows/pr-goreleaser.yaml (3)

• step-security/harden-runner v2.12.0@0634a2670c59f64b4a01f0f96f84700a4088b9f0 → [Updates: v2.17.0]
• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683 → [Updates: v4.3.1, v6.0.2]
• goreleaser/goreleaser-action v6.3.0@9c156ee8a17a598857849441385a2041ef570552 → [Updates: v6.4.0, v7.0.0]

.github/workflows/pr-label.yaml (1)

• step-security/harden-runner v2.12.0@0634a2670c59f64b4a01f0f96f84700a4088b9f0 → [Updates: v2.17.0]

.github/workflows/pr-stale.yaml (1)

• actions/stale v9.1.0@5bef64f19d7facfb25b37b414482c7164d639639 → [Updates: v10.2.0]

.github/workflows/pr-trivy.yaml (3)

• step-security/harden-runner v2.12.0@0634a2670c59f64b4a01f0f96f84700a4088b9f0 → [Updates: v2.17.0]
• aquasecurity/trivy-action 0.30.0@6c175e9c4083a92bbca2f9724c8a5e33bc2d97a5 → [Updates: v0.35.0, 0.30.0]
• github/codeql-action v3.28.17@60168efe1c415ce0f5521ea06d5c2062adbeed1b → [Updates: v3.35.1, v4.35.1]

.github/workflows/rebase.yaml (3)

• step-security/harden-runner v2.12.0@0634a2670c59f64b4a01f0f96f84700a4088b9f0 → [Updates: v2.17.0]
• actions/checkout v4@11bd71901bbe5b1630ceea73d27597364c9af683 → [Updates: v6, v4]
• cirrus-actions/rebase 1.8@b87d48154a87a85666003575337e27b8cd65f691

.github/workflows/release.yaml (12)

• step-security/harden-runner v2.12.0@0634a2670c59f64b4a01f0f96f84700a4088b9f0 → [Updates: v2.17.0]
• actions/checkout v4@11bd71901bbe5b1630ceea73d27597364c9af683 → [Updates: v6, v4]
• actions/setup-go v5.4.0@0aaccfd150d50ccaeb58ebd88d36e91967a5f35b → [Updates: v5.6.0, v6.4.0]
• docker/login-action v3.4.0@74a5d142397b4f367a81961eba4e8cd7edddf772 → [Updates: v3.7.0, v4.1.0]
• sigstore/cosign-installer v3.8.2@3454372f43399081ed03b604cb2d021dabca52bb → [Updates: v3.10.1, v4.1.1]
• anchore/sbom-action v0.19.0@9f7302141466aa6482940f15371237e9d9f4c34a → [Updates: v0.24.0]
• goreleaser/goreleaser-action v6.3.0@9c156ee8a17a598857849441385a2041ef570552 → [Updates: v6.4.0, v7.0.0]
• step-security/harden-runner v2.12.0@0634a2670c59f64b4a01f0f96f84700a4088b9f0 → [Updates: v2.17.0]
• actions/checkout v4@11bd71901bbe5b1630ceea73d27597364c9af683 → [Updates: v6, v4]
• azure/setup-helm v3.5@5119fcb9089d432beecbf79bb2c7915207344b78
• sigstore/cosign-installer v3.8.2@3454372f43399081ed03b604cb2d021dabca52bb → [Updates: v3.10.1, v4.1.1]
• go 1.22 → [Updates: 1.26]

.github/workflows/report-on-vulnerabilities.yaml (7)

• step-security/harden-runner v2.12.0@0634a2670c59f64b4a01f0f96f84700a4088b9f0 → [Updates: v2.17.0]
• aquasecurity/trivy-action 0.30.0@6c175e9c4083a92bbca2f9724c8a5e33bc2d97a5 → [Updates: v0.35.0, 0.30.0]
• actions/upload-artifact v4.6.2@ea165f8d65b6e75b540449e92b4886f43607fa02 → [Updates: v7.0.1]
• step-security/harden-runner v2.12.0@0634a2670c59f64b4a01f0f96f84700a4088b9f0 → [Updates: v2.17.0]
• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683 → [Updates: v4.3.1, v6.0.2]
• actions/download-artifact v4.3.0@d3f86a106a0bac45b974a628896c90dbdf5c8093 → [Updates: v8.0.1]
• JasonEtco/create-an-issue v2.9.2@1b14a70e4d8dc185e5cc76d3bec9eab20257b2c5

.github/workflows/scan.yaml (5)

• step-security/harden-runner v2.12.0@0634a2670c59f64b4a01f0f96f84700a4088b9f0 → [Updates: v2.17.0]
• actions/checkout v4@11bd71901bbe5b1630ceea73d27597364c9af683 → [Updates: v6, v4]
• github/codeql-action codeql-bundle-20221020@f0a12816612c7306b485a22cb164feb43c6df818
• github/codeql-action codeql-bundle-20221020@f0a12816612c7306b485a22cb164feb43c6df818
• github/codeql-action codeql-bundle-20221020@f0a12816612c7306b485a22cb164feb43c6df818

.github/workflows/scorecard.yaml (5)

• step-security/harden-runner v2.12.0@0634a2670c59f64b4a01f0f96f84700a4088b9f0 → [Updates: v2.17.0]
• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683 → [Updates: v4.3.1, v6.0.2]
• ossf/scorecard-action v2.4.1@f49aabe0b5af0936a0987cfb85d86b75731b0186 → [Updates: v2.4.3]
• actions/upload-artifact v4.6.2@ea165f8d65b6e75b540449e92b4886f43607fa02 → [Updates: v7.0.1]
• github/codeql-action v3.28.17@60168efe1c415ce0f5521ea06d5c2062adbeed1b → [Updates: v3.35.1, v4.35.1]

gomod (1)

go.mod (15)

• go 1.22.0
• github.com/fluxcd/pkg/runtime v0.49.1 → [Updates: v0.103.0]
• github.com/go-logr/logr v1.4.2 → [Updates: v1.4.3]
• github.com/jackc/pgx/v5 v5.7.4 → [Updates: v5.9.0]
• github.com/mongodb-forks/digest v1.1.0
• github.com/onsi/ginkgo/v2 v2.22.2 → [Updates: v2.28.1]
• github.com/onsi/gomega v1.36.2 → [Updates: v1.39.1]
• github.com/spf13/pflag v1.0.6 → [Updates: v1.0.10]
• github.com/testcontainers/testcontainers-go v0.35.0 → [Updates: v0.42.0]
• go.mongodb.org/atlas v0.38.0
• go.mongodb.org/mongo-driver v1.17.3 → [Updates: v1.17.9, v2.5.0]
• k8s.io/api v0.31.3 → [Updates: v0.35.3]
• k8s.io/apimachinery v0.31.4 → [Updates: v0.35.3]
• k8s.io/client-go v0.31.3 → [Updates: v0.35.3]
• sigs.k8s.io/controller-runtime v0.19.4 → [Updates: v0.23.3]

helm-values (1)

chart/db-controller/values.yaml (1)

• quay.io/brancz/kube-rbac-proxy v0.19.1 → [Updates: v0.21.2]

kustomize (1)

config/base/manager/kustomization.yaml

renovate-config-presets (1)

renovate.json

---

• Check this box to trigger a request for Renovate to run again on this repository