Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Config Migration Needed

• Select this checkbox to let Renovate create an automated Config Migration PR.

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• Update actions/cache digest to 0057852
• Update actions/checkout digest to 34e1148
• Update actions/github-script digest to f28e40c
• Update actions/setup-go digest to 40f1582
• Update docker/login-action digest to c94ce9f
• Update module dario.cat/mergo to v1.0.2
• Update module github.com/go-logr/logr to v1.4.3
• Update aquasecurity/trivy-action action to v0.35.0
• Update dependency golang to v1.26.2
• Update module github.com/bufbuild/buf to v1.68.2
• Update module github.com/google/go-cmp to v0.7.0
• Update module github.com/spf13/afero to v1.15.0
• Update module golang.org/x/time to v0.15.0
• Update module google.golang.org/grpc/cmd/protoc-gen-go-grpc to v1.6.1
• Update zeebe-io/backport-action action to v2.5.0
• Update actions/cache action to v5
• Update actions/checkout action to v6
• Update actions/github-script action to v9
• Update actions/setup-go action to v6
• Update codecov/codecov-action action to v6
• Update dependency golangci/golangci-lint to v2
• Update dependency ubuntu to v24
• Update docker/login-action action to v4
• Update github/codeql-action action to v4
• Update golangci/golangci-lint-action action to v9
• Update zeebe-io/backport-action action to v4
• 🔐 Create all rate-limited PRs at once 🔐

PR Edited (Blocked)

The following updates have been manually edited so Renovate will no longer make changes. To discard all commits and start over, click on a checkbox below.

• Update dependency golangci/golangci-lint to v1.64.8

---

Warning

Renovate failed to look up the following dependencies: Could not determine new digest for update (github-tags package aquasecurity/trivy-action).

Files affected: .github/workflows/ci.yml

---

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• Update module github.com/docker/docker to v25.0.13+incompatible [SECURITY]
• Update module github.com/go-chi/chi/v5 to v5.2.2 [SECURITY]
• Update module github.com/rs/cors to v1.11.0 [SECURITY]
• Update module go.opentelemetry.io/otel/sdk to v1.43.0 [SECURITY]
• Update module golang.org/x/crypto to v0.45.0 [SECURITY]
• Update module golang.org/x/net to v0.45.0 [SECURITY]
• Update module golang.org/x/oauth2 to v0.27.0 [SECURITY]
• Update module google.golang.org/grpc to v1.79.3 [SECURITY]
• Update module google.golang.org/protobuf to v1.33.0 [SECURITY]
• Update module github.com/docker/cli to v29 [SECURITY]
• Update codecov/codecov-action digest to b9fd7d1
• Update github/codeql-action digest to ce64ddc
• Update kubernetes deps (k8s.io/api, k8s.io/apiextensions-apiserver, k8s.io/apimachinery, k8s.io/client-go, sigs.k8s.io/controller-runtime, sigs.k8s.io/controller-tools, sigs.k8s.io/yaml)
• Update module github.com/evanphx/json-patch to v5.9.11+incompatible
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

github-actions (5)

.github/workflows/backport.yml (3)

• actions/checkout v4@b4ffde65f46336ab88eb53be808477a3936bae11 → [Updates: v6, v4]
• zeebe-io/backport-action v2.4.1@e8161d6a0dbfa2651b7daa76cbb75bc7c925bbf3 → [Updates: v2.5.0, v4.3.0]
• ubuntu 22.04 → [Updates: 24.04]

.github/workflows/ci.yml (29)

• actions/checkout v4@b4ffde65f46336ab88eb53be808477a3936bae11 → [Updates: v6, v4]
• actions/setup-go v5@0c52d547c9bc32b1aa3301fd7a9cb496313a4491 → [Updates: v6, v5]
• actions/cache v4@13aacd865c20de90d75de3b17ebe84f7a17d57d2 → [Updates: v5, v4]
• actions/cache v4@13aacd865c20de90d75de3b17ebe84f7a17d57d2 → [Updates: v5, v4]
• fkirc/skip-duplicate-actions v5.3.1@f75f66ce1886f00957d99748a42c724f4330bdcf
• actions/checkout v4@b4ffde65f46336ab88eb53be808477a3936bae11 → [Updates: v6, v4]
• actions/setup-go v5@0c52d547c9bc32b1aa3301fd7a9cb496313a4491 → [Updates: v6, v5]
• actions/cache v4@13aacd865c20de90d75de3b17ebe84f7a17d57d2 → [Updates: v5, v4]
• actions/cache v4@13aacd865c20de90d75de3b17ebe84f7a17d57d2 → [Updates: v5, v4]
• golangci/golangci-lint-action v3@3a919529898de77ec3da873e3063ca4b10e7f5cc → [Updates: v9]
• actions/checkout v4@b4ffde65f46336ab88eb53be808477a3936bae11 → [Updates: v6, v4]
• actions/setup-go v5@0c52d547c9bc32b1aa3301fd7a9cb496313a4491 → [Updates: v6, v5]
• actions/cache v4@13aacd865c20de90d75de3b17ebe84f7a17d57d2 → [Updates: v5, v4]
• actions/cache v4@13aacd865c20de90d75de3b17ebe84f7a17d57d2 → [Updates: v5, v4]
• github/codeql-action v3@b7bf0a3ed3ecfa44160715d7c442788f65f0f923 → [Updates: v4, v3]
• github/codeql-action v3@b7bf0a3ed3ecfa44160715d7c442788f65f0f923 → [Updates: v4, v3]
• actions/checkout v4@b4ffde65f46336ab88eb53be808477a3936bae11 → [Updates: v6, v4]
• aquasecurity/trivy-action 0.16.1@d43c1f16c00cfd3978dde6c07f4bbcf9eb6993ca → [Updates: 0.35.0]
• actions/checkout v4@b4ffde65f46336ab88eb53be808477a3936bae11 → [Updates: v6, v4]
• actions/setup-go v5@0c52d547c9bc32b1aa3301fd7a9cb496313a4491 → [Updates: v6, v5]
• actions/cache v4@13aacd865c20de90d75de3b17ebe84f7a17d57d2 → [Updates: v5, v4]
• actions/cache v4@13aacd865c20de90d75de3b17ebe84f7a17d57d2 → [Updates: v5, v4]
• codecov/codecov-action v4@c4cf8a4f03f0ac8585acb7c1b7ce3460ec15782f → [Updates: v6, v4]
• ubuntu 22.04 → [Updates: 24.04]
• ubuntu 22.04 → [Updates: 24.04]
• ubuntu 22.04 → [Updates: 24.04]
• ubuntu 22.04 → [Updates: 24.04]
• ubuntu 22.04 → [Updates: 24.04]
• ubuntu 22.04 → [Updates: 24.04]

.github/workflows/commands.yml (7)

• xt0rted/slash-command-action v2@bf51f8f5f4ea3d58abc7eca58f77104182b23e88
• actions/github-script v7@60a0d83039c74a4aee543508d2ffcb1c3799cdea → [Updates: v9, v7]
• xt0rted/slash-command-action v2@bf51f8f5f4ea3d58abc7eca58f77104182b23e88
• actions/checkout v4@b4ffde65f46336ab88eb53be808477a3936bae11 → [Updates: v6, v4]
• zeebe-io/backport-action v2.4.1@e8161d6a0dbfa2651b7daa76cbb75bc7c925bbf3 → [Updates: v2.5.0, v4.3.0]
• ubuntu 22.04 → [Updates: 24.04]
• ubuntu 22.04 → [Updates: 24.04]

.github/workflows/promote.yml (3)

• actions/checkout v4@b4ffde65f46336ab88eb53be808477a3936bae11 → [Updates: v6, v4]
• docker/login-action v3@343f7c4344506bcbf9b4de18042ae17996df046d → [Updates: v4, v3]
• ubuntu 22.04 → [Updates: 24.04]

.github/workflows/tag.yml (3)

• actions/checkout v4@b4ffde65f46336ab88eb53be808477a3936bae11 → [Updates: v6, v4]
• negz/create-tag v1@39bae1e0932567a58c20dea5a1a0d18358503320
• ubuntu 22.04 → [Updates: 24.04]

gomod (1)

go.mod (26)

• go 1.20
• dario.cat/mergo v1.0.0 → [Updates: v1.0.2]
• github.com/bufbuild/buf v1.29.0 → [Updates: v1.68.2]
• github.com/evanphx/json-patch v5.6.0+incompatible → [Updates: v5.9.11+incompatible]
• github.com/go-logr/logr v1.4.1 → [Updates: v1.4.3]
• github.com/google/go-cmp v0.6.0 → [Updates: v0.7.0]
• github.com/spf13/afero v1.11.0 → [Updates: v1.15.0]
• golang.org/x/time v0.5.0 → [Updates: v0.15.0]
• google.golang.org/grpc v1.60.1 → [Updates: v1.79.3]
• google.golang.org/grpc/cmd/protoc-gen-go-grpc v1.3.0 → [Updates: v1.6.1]
• google.golang.org/protobuf v1.32.0 → [Updates: v1.33.0]
• k8s.io/api v0.28.4 → [Updates: v0.35.4]
• k8s.io/apiextensions-apiserver v0.28.4 → [Updates: v0.35.4]
• k8s.io/apimachinery v0.28.4 → [Updates: v0.35.4]
• k8s.io/client-go v0.28.4 → [Updates: v0.35.4]
• sigs.k8s.io/controller-runtime v0.16.3 → [Updates: v0.23.3]
• sigs.k8s.io/controller-tools v0.13.0 → [Updates: v0.20.1]
• sigs.k8s.io/yaml v1.4.0 → [Updates: v1.6.0]
• github.com/docker/cli v24.0.7+incompatible → [Updates: v29.2.0+incompatible]
• github.com/docker/docker v25.0.0+incompatible → [Updates: v25.0.13+incompatible]
• github.com/go-chi/chi/v5 v5.0.11 → [Updates: v5.2.2]
• github.com/rs/cors v1.10.1 → [Updates: v1.11.0]
• go.opentelemetry.io/otel/sdk v1.22.0 → [Updates: v1.43.0]
• golang.org/x/crypto v0.18.0 → [Updates: v0.45.0]
• golang.org/x/net v0.20.0 → [Updates: v0.45.0]
• golang.org/x/oauth2 v0.15.0 → [Updates: v0.27.0]

regex (3)

.github/workflows/ci.yml (1)

• golang 1.21.6 → [Updates: 1.26.2]

.github/workflows/ci.yml (1)

• golangci/golangci-lint 1.55.2 → [Updates: 1.64.8, 2.11.4]

Makefile (1)

• golangci/golangci-lint 1.55.2 → [Updates: 1.64.8, 2.11.4]

---

• Check this box to trigger a request for Renovate to run again on this repository