Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Config Migration Needed

• Select this checkbox to let Renovate create an automated Config Migration PR.

Pending Status Checks

These updates await pending status checks. To force their creation now, click the checkbox below.

• chore(deps-dev): update github/codeql-action action to v3.27.6

Open

These updates have all been created already. Click a checkbox below to force a retry/rebase of any.

• chore(deps): update alpine:3.20.3 docker digest to 1e42bbe
• chore(deps-dev): update actions/checkout digest to 11bd719
• chore(deps-dev): update pascalgn/size-label-action digest to 6ec5bd0
• chore(deps): update module github.com/sigstore/cosign/v2 to v2.4.1
• chore(deps): update module github.com/sigstore/sigstore to v1.8.10
• chore(deps): update dependency go to v1.23.3
• chore(deps): update module sigs.k8s.io/kustomize/api to v0.18.0
• chore(deps): update module sigs.k8s.io/kustomize/kyaml to v0.18.1
• chore(deps): update module github.com/alitto/pond to v2
• Click on this checkbox to rebase all open PRs at once

Ignored or Blocked

These are blocked by an existing closed PR and will not be recreated unless you click a checkbox below.

• chore(deps): update github.com/opencontainers/go-digest digest to 22b78e4

Detected dependencies

dockerfile

Dockerfile

• alpine 3.20.3@sha256:beefdbd8a1da6d2915566fde36db9db0b524eb737fc57cd1367effd16dc0d06d

github-actions

.github/workflows/main.yaml

• step-security/harden-runner v2.10.2@0080882f6c36860b6ba35c610c98ce87d4e2f26f
• actions/checkout v4@692973e3d937129bcbf40652eb9f2f61becf3332
• actions/setup-go v5.1.0@41dfa10bad2bb2ae585af6ee5bb4d7d973ad74ed
• shogo82148/actions-goveralls v1.9.0@785c9d68212c91196d3994652647f8721918ba11

.github/workflows/pr-actions.yaml

• step-security/harden-runner v2.10.2@0080882f6c36860b6ba35c610c98ce87d4e2f26f
• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• zgosalvez/github-actions-ensure-sha-pinned-actions v3.0.17@5d6ac37a4cef8b8df67f482a8e384987766f0213

.github/workflows/pr-build.yaml

• step-security/harden-runner v2.10.2@0080882f6c36860b6ba35c610c98ce87d4e2f26f
• actions/checkout v4@692973e3d937129bcbf40652eb9f2f61becf3332
• actions/setup-go v5.1.0@41dfa10bad2bb2ae585af6ee5bb4d7d973ad74ed
• chrisdickinson/setup-yq v1.0.1@3d931309f27270ebbafd53f2daee773a82ea1822
• shogo82148/actions-goveralls v1.9.0@785c9d68212c91196d3994652647f8721918ba11

.github/workflows/pr-goreleaser.yaml

• step-security/harden-runner v2.10.2@0080882f6c36860b6ba35c610c98ce87d4e2f26f
• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• goreleaser/goreleaser-action v6.1.0@9ed2f89a662bf1735a48bc8557fd212fa902bebf

.github/workflows/pr-label.yaml

• step-security/harden-runner v2.10.2@0080882f6c36860b6ba35c610c98ce87d4e2f26f
• pascalgn/size-label-action 49850f3557d4b77f0b2e759829defd77ccc07c54

.github/workflows/pr-stale.yaml

• actions/stale v9.0.0@28ca1036281a5e5922ead5184a1bbf96e5fc984e

.github/workflows/pr-trivy.yaml

• step-security/harden-runner v2.10.2@0080882f6c36860b6ba35c610c98ce87d4e2f26f
• aquasecurity/trivy-action 0.29.0@18f2510ee396bbf400402947b394f2dd8c87dbb0
• github/codeql-action v3.27.5@f09c1c0a94de965c15400f5634aa42fac8fb8f88

.github/workflows/publish-release.yaml

• Actions-R-Us/actions-tagger v2.0.3@330ddfac760021349fef7ff62b372f2f691c20fb

.github/workflows/rebase.yaml

• step-security/harden-runner v2.10.2@0080882f6c36860b6ba35c610c98ce87d4e2f26f
• actions/checkout v4@692973e3d937129bcbf40652eb9f2f61becf3332
• cirrus-actions/rebase 1.8@b87d48154a87a85666003575337e27b8cd65f691

.github/workflows/release.yaml

• step-security/harden-runner v2.10.2@0080882f6c36860b6ba35c610c98ce87d4e2f26f
• actions/checkout v4@692973e3d937129bcbf40652eb9f2f61becf3332
• actions/setup-go v5.1.0@41dfa10bad2bb2ae585af6ee5bb4d7d973ad74ed
• docker/login-action v3.3.0@9780b0c442fbb1117ed29e0efdff1e18412f7567
• sigstore/cosign-installer v3.7.0@dc72c7d5c4d10cd6bcb8cf6e3fd625a9e5e537da
• anchore/sbom-action v0.17.8@55dc4ee22412511ee8c3142cbea40418e6cec693
• goreleaser/goreleaser-action v6.1.0@9ed2f89a662bf1735a48bc8557fd212fa902bebf

.github/workflows/report-on-vulnerabilities.yaml

• step-security/harden-runner v2.10.2@0080882f6c36860b6ba35c610c98ce87d4e2f26f
• aquasecurity/trivy-action 0.29.0@18f2510ee396bbf400402947b394f2dd8c87dbb0
• actions/upload-artifact v4.4.3@b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882
• step-security/harden-runner v2.10.2@0080882f6c36860b6ba35c610c98ce87d4e2f26f
• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/download-artifact v4.1.8@fa0a91b85d4f404e444e00e005971372dc801d16
• JasonEtco/create-an-issue v2.9.2@1b14a70e4d8dc185e5cc76d3bec9eab20257b2c5

.github/workflows/scan.yaml

• step-security/harden-runner v2.10.2@0080882f6c36860b6ba35c610c98ce87d4e2f26f
• actions/checkout v4@692973e3d937129bcbf40652eb9f2f61becf3332
• github/codeql-action codeql-bundle-20221020@f0a12816612c7306b485a22cb164feb43c6df818
• github/codeql-action codeql-bundle-20221020@f0a12816612c7306b485a22cb164feb43c6df818
• github/codeql-action codeql-bundle-20221020@f0a12816612c7306b485a22cb164feb43c6df818

.github/workflows/scorecard.yaml

• step-security/harden-runner v2.10.2@0080882f6c36860b6ba35c610c98ce87d4e2f26f
• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• ossf/scorecard-action v2.4.0@62b2cac7ed8198b15735ed49ab1e5cf35480ba46
• actions/upload-artifact v4.4.3@b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882
• github/codeql-action v3.27.5@f09c1c0a94de965c15400f5634aa42fac8fb8f88

gomod

go.mod

• go 1.22.6
• go 1.22.7
• github.com/Masterminds/semver/v3 v3.3.1
• github.com/alitto/pond v1.9.2
• github.com/cyphar/filepath-securejoin v0.3.4
• github.com/docker/cli v27.3.1+incompatible
• github.com/drone/envsubst v1.0.3
• github.com/fluxcd/helm-controller/api v1.1.0
• github.com/fluxcd/pkg/apis/kustomize v1.6.1
• github.com/fluxcd/pkg/oci v0.41.1
• github.com/fluxcd/pkg/runtime v0.49.1
• github.com/fluxcd/pkg/version v0.4.1
• github.com/fluxcd/source-controller/api v1.4.1
• github.com/go-logr/logr v1.4.2
• github.com/go-logr/zapr v1.3.0
• github.com/gofrs/flock v0.12.1
• github.com/google/go-containerregistry v0.20.2
• github.com/onsi/gomega v1.36.0
• github.com/opencontainers/go-digest v1.0.0
• github.com/otiai10/copy v1.14.0
• github.com/sethvargo/go-envconfig v1.1.0
• github.com/sigstore/cosign/v2 v2.4.0
• github.com/sigstore/sigstore v1.8.9
• github.com/spf13/pflag v1.0.5
• go.uber.org/zap v1.27.0
• golang.org/x/sync v0.10.0
• helm.sh/helm/v3 v3.16.3
• k8s.io/api v0.31.3
• k8s.io/apiextensions-apiserver v0.31.3
• k8s.io/apimachinery v0.31.3
• k8s.io/helm v2.17.0+incompatible
• sigs.k8s.io/kustomize/api v0.17.3
• sigs.k8s.io/kustomize/kyaml v0.17.2
• sigs.k8s.io/yaml v1.4.0
• github.com/opencontainers/go-digest v1.0.1-0.20231025023718-d50d2fec9c98@d50d2fec9c98
• sigs.k8s.io/kustomize/api v0.17.3
• sigs.k8s.io/kustomize/kyaml v0.17.2

helm-requirements

internal/helm/testdata/charts/helmchartwithdeps-v1/requirements.yaml

helm-values

internal/helm/testdata/charts/helmchart-v1/values.yaml

internal/helm/testdata/charts/helmchartwithdeps-v1/values.yaml

helmv3

internal/helm/testdata/charts/helmchartwithdeps/Chart.yaml

• grafana >=5.7.0

homebrew

Formula/flux-build.rb

• DoodleScheduling/flux-build v3.0.8

---

• Check this box to trigger a request for Renovate to run again on this repository