Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Pending Status Checks

These updates await pending status checks. To force their creation now, click the checkbox below.

• chore(deps-dev): update sigstore/cosign-installer action to v3.6.0

Open

These updates have all been created already. Click a checkbox below to force a retry/rebase of any.

• chore(deps): update module github.com/sigstore/cosign to v2 [security]
• chore(deps-dev): update actions/checkout digest to 692973e
• chore(deps): update module github.com/google/go-containerregistry to v0.20.2
• chore(deps): update module github.com/sigstore/sigstore to v1.8.8
• chore(deps): update module github.com/docker/cli to v27
• chore(deps): update module github.com/fluxcd/helm-controller/api to v1
• chore(deps-dev): update goreleaser/goreleaser-action action to v6
• Click on this checkbox to rebase all open PRs at once

Detected dependencies

dockerfile

Dockerfile

github-actions

.github/workflows/main.yaml

• actions/checkout v4@0ad4b8fadaa221de15dcec353f45205ec38ea70b
• actions/setup-go v5.0.2@0a12ed9d6a96ab950c8f026ed9f722fe0da7ef32
• shogo82148/actions-goveralls v1.9.0@785c9d68212c91196d3994652647f8721918ba11

.github/workflows/pr-build.yaml

• actions/checkout v4@0ad4b8fadaa221de15dcec353f45205ec38ea70b
• actions/setup-go v5.0.2@0a12ed9d6a96ab950c8f026ed9f722fe0da7ef32
• chrisdickinson/setup-yq v1.0.1@3d931309f27270ebbafd53f2daee773a82ea1822
• shogo82148/actions-goveralls v1.9.0@785c9d68212c91196d3994652647f8721918ba11

.github/workflows/pr-label.yaml

• pascalgn/size-label-action bbbaa0d5ccce8e2e76254560df5c64b82dac2e12

.github/workflows/publish-release.yaml

• Actions-R-Us/actions-tagger v2.0.3@330ddfac760021349fef7ff62b372f2f691c20fb

.github/workflows/rebase.yaml

• actions/checkout v4@0ad4b8fadaa221de15dcec353f45205ec38ea70b
• cirrus-actions/rebase 1.8@b87d48154a87a85666003575337e27b8cd65f691

.github/workflows/release.yaml

• actions/checkout v4@0ad4b8fadaa221de15dcec353f45205ec38ea70b
• actions/setup-go v5.0.2@0a12ed9d6a96ab950c8f026ed9f722fe0da7ef32
• docker/login-action v3.3.0@9780b0c442fbb1117ed29e0efdff1e18412f7567
• sigstore/cosign-installer v3.5.0@59acb6260d9c0ba8f4a2f9d9b48431a222b68e20
• anchore/sbom-action v0.17.0@d94f46e13c6c62f59525ac9a1e147a99dc0b9bf5
• goreleaser/goreleaser-action v5.1.0@5742e2a039330cbb23ebf35f046f814d4c6ff811

.github/workflows/scan.yaml

• actions/checkout v4@0ad4b8fadaa221de15dcec353f45205ec38ea70b
• fossa-contrib/fossa-action v3.0.0@cdc5065bcdee31a32e47d4585df72d66e8e941c2
• actions/checkout v4@0ad4b8fadaa221de15dcec353f45205ec38ea70b
• github/codeql-action codeql-bundle-20221020@f0a12816612c7306b485a22cb164feb43c6df818
• github/codeql-action codeql-bundle-20221020@f0a12816612c7306b485a22cb164feb43c6df818
• github/codeql-action codeql-bundle-20221020@f0a12816612c7306b485a22cb164feb43c6df818

gomod

go.mod

• go 1.22.0
• github.com/Masterminds/semver/v3 v3.2.1
• github.com/cyphar/filepath-securejoin v0.3.1
• github.com/docker/cli v26.1.5+incompatible
• github.com/drone/envsubst v1.0.3
• github.com/fluxcd/helm-controller/api v0.37.4
• github.com/fluxcd/pkg/apis/kustomize v1.5.0
• github.com/fluxcd/pkg/oci v0.38.1
• github.com/fluxcd/pkg/runtime v0.47.1
• github.com/fluxcd/pkg/version v0.4.0
• github.com/fluxcd/source-controller/api v1.3.0
• github.com/go-logr/logr v1.4.2
• github.com/go-logr/zapr v1.3.0
• github.com/google/go-containerregistry v0.20.1
• github.com/onsi/gomega v1.34.1
• github.com/opencontainers/go-digest v1.0.0
• github.com/otiai10/copy v1.14.0
• github.com/sethvargo/go-envconfig v1.1.0
• github.com/sigstore/cosign v1.13.6
• github.com/sigstore/sigstore v1.8.7
• github.com/spf13/pflag v1.0.5
• go.uber.org/zap v1.27.0
• golang.org/x/sync v0.8.0
• helm.sh/helm/v3 v3.15.3
• k8s.io/api v0.30.3
• k8s.io/apiextensions-apiserver v0.30.3
• k8s.io/apimachinery v0.30.3
• k8s.io/helm v2.17.0+incompatible
• sigs.k8s.io/kustomize/api v0.17.3
• sigs.k8s.io/kustomize/kyaml v0.17.2
• sigs.k8s.io/yaml v1.4.0
• sigs.k8s.io/kustomize/api v0.17.3
• sigs.k8s.io/kustomize/kyaml v0.17.2

helm-requirements

internal/helm/testdata/charts/helmchartwithdeps-v1/requirements.yaml

helm-values

internal/helm/testdata/charts/helmchart-v1/values.yaml

internal/helm/testdata/charts/helmchartwithdeps-v1/values.yaml

helmv3

internal/helm/testdata/charts/helmchartwithdeps/Chart.yaml

• grafana >=5.7.0

homebrew

Formula/flux-build.rb

• DoodleScheduling/flux-build v2.3.0

---

• Check this box to trigger a request for Renovate to run again on this repository