Dependency Dashboard

[renovate-sh-app]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Abandoned Dependencies

Note

Packages are marked as abandoned when they exceed the abandonmentThreshold since their last release. Unlike deprecated packages with official notices, abandonment is detected by release inactivity.

These dependencies have not received updates for an extended period and may be unmaintained:

View abandoned dependencies (1)

Datasource	Package	Last Updated
gomod	github.com/Masterminds/semver	2019-09-11

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• chore(deps): update golang docker tag to v1.26
• fix(deps): update module github.com/stretchr/testify to v1.11.1
• fix(deps): update module golang.org/x/sync to v0.20.0
• fix(deps): update opentelemetry-go monorepo to v1.42.0 (go.opentelemetry.io/otel, go.opentelemetry.io/otel/trace)
• chore(deps): update actions/checkout action to v6
• chore(deps): update actions/setup-go action to v6
• fix(deps): update module github.com/urfave/cli/v2 to v3
• 🔐 Create all rate-limited PRs at once 🔐

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): update module go.opentelemetry.io/otel/sdk to v1.40.0 [security]
• chore(deps): update module golang.org/x/net to v0.45.0 [security]
• chore(deps): pin dependencies (actions/checkout, actions/setup-go, alpine, ghcr.io/equinix-labs/otel-cli, golang)
• chore(deps): update dagger/dagger-for-github digest to 074302d
• chore(deps): update golangci/golangci-lint-action digest to b7bcab6
• chore(deps): update mszostok/codeowners-validator digest to f3651e3
• fix(deps): update module github.com/quasilyte/go-ruleguard/dsl to v0.3.23
• fix(deps): update module github.com/urfave/cli/v2 to v2.27.7
• chore(deps): update actions/checkout action to v4.3.1
• chore(deps): update alpine docker tag to v3.23
• chore(deps): update dependency go to v1.26.1
• fix(deps): update module dagger.io/dagger to v0.20.1
• Click on this checkbox to rebase all open PRs at once

Vulnerabilities

Important

4/4 CVEs have Renovate fixes.

gomod

go.mod

go.opentelemetry.io/otel/sdk

• GHSA-9h8m-3fm2-qjrq (fixed in >= 1.40.0)
• GO-2026-4394 (fixed in >= 1.40.0)

golang.org/x/net

• GO-2026-4441 (fixed in >= 0.45.0)
• GO-2026-4440 (fixed in >= 0.45.0)

Detected Dependencies

dockerfile (1)

Dockerfile (3)

• ghcr.io/equinix-labs/otel-cli v0.4.5 → [Updates: v0.4.5]
• alpine 3.20 → [Updates: 3.23, 3.20]
• golang 1.23-alpine → [Updates: 1.26-alpine, 1.23-alpine]

github-actions (5)

.github/workflows/codeowners-validator.yml (2)

• actions/checkout v4 → [Updates: v6, v4]
• mszostok/codeowners-validator 7f3f5e28c6d7b8dfae5731e54ce2272ca384592f → [Updates: undefined]

.github/workflows/pr-integration-tests.yml (5)

• actions/checkout v4 → [Updates: v6, v4]
• actions/checkout v4 → [Updates: v6, v4]
• actions/checkout v4 → [Updates: v6, v4]
• dagger/dagger-for-github e47aba410ef9bb9ed81a4d2a97df31061e5e842e → [Updates: undefined]
• dagger/dagger-for-github e47aba410ef9bb9ed81a4d2a97df31061e5e842e → [Updates: undefined]

.github/workflows/pr.yml (7)

• actions/checkout v4 → [Updates: v6, v4]
• actions/setup-go v5 → [Updates: v6, v5]
• golangci/golangci-lint-action d6238b002a20823d52840fda27e2d4891c5952dc → [Updates: undefined]
• actions/checkout v4 → [Updates: v6, v4]
• actions/setup-go v5 → [Updates: v6, v5]
• go stable
• go stable

.github/workflows/publish-docker-image.yml (2)

• actions/checkout v4.1.3@1d96c772d19495a3b5c517cd2bc0cb401ea0529f → [Updates: v4.3.1, v6.0.2]
• grafana/shared-workflows main

.github/workflows/publish-techdocs.yml (1)

• grafana/shared-workflows main

gomod (1)

go.mod (12)

• go 1.23.8
• go 1.24.1 → [Updates: 1.26.1]
• dagger.io/dagger v0.18.6 → [Updates: v0.20.1]
• github.com/Masterminds/semver v1.5.0
• github.com/quasilyte/go-ruleguard/dsl v0.3.22 → [Updates: v0.3.23]
• github.com/stretchr/testify v1.10.0 → [Updates: v1.11.1]
• github.com/urfave/cli/v2 v2.27.6 → [Updates: v2.27.7, v3.7.0]
• go.opentelemetry.io/otel v1.35.0 → [Updates: v1.42.0]
• go.opentelemetry.io/otel/trace v1.35.0 → [Updates: v1.42.0]
• golang.org/x/sync v0.14.0 → [Updates: v0.20.0]
• go.opentelemetry.io/otel/sdk v1.35.0 → [Updates: v1.40.0]
• golang.org/x/net v0.40.0 → [Updates: v0.45.0]

---

Need help?

You can ask for more help in the following Slack channel: #proj-renovate-self-hosted. In that channel you can also find ADR and FAQ docs in the Resources section.