Dependency Dashboard

[renovate-sh-app]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Abandoned Dependencies

The following dependencies have not received updates for an extended period and may be unmaintained.

View abandoned dependencies (7)

[!NOTE]
Packages are marked as abandoned when they exceed the abandonmentThreshold since their last release. Unlike deprecated packages with official notices, abandonment is detected by release inactivity.

Datasource	Package	Last Updated
gomod	github.com/beorn7/perks	2019-07-31
gomod	github.com/cespare/xxhash/v2	2024-04-04
gomod	github.com/davecgh/go-spew	2018-02-21
gomod	github.com/kr/text	2020-02-14
gomod	github.com/munnerz/goautoneg	2019-10-10
gomod	github.com/pmezard/go-difflib	2016-01-10
gomod	gopkg.in/yaml.v3	2022-05-27

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• chore(deps): update module github.com/prometheus/procfs to v0.21.1
• chore(deps): update snok/container-retention-policy action to v3.1.0
• fix(deps): update module github.com/prometheus/client_golang to v1.24.0
• fix(deps): update module golang.org/x/sync to v0.22.0
• chore(deps): update actions/checkout action to v7
• chore(deps): update actions/setup-go action to v7
• chore(deps): update azure/setup-helm action to v5
• chore(deps): update bats-core/bats-action action to v4
• chore(deps): update github artifact actions (major) (actions/download-artifact, actions/upload-artifact)
• chore(deps): update golangci/golangci-lint-action action to v9
• chore(deps): update mshick/add-pr-comment action to v3
• chore(deps): update softprops/action-gh-release action to v3
• 🔐 Create all rate-limited PRs at once 🔐

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• fix(security/unknown/): update module golang.org/x/sys to v0.44.0 [security]
• chore(deps): pin dependencies (actions/attest-build-provenance, actions/checkout, actions/download-artifact, actions/github-script, actions/setup-go, actions/upload-artifact, alpine, golang)
• chore(deps): update azure/setup-helm digest to 1a275c3
• chore(deps): update softprops/action-gh-release digest to 3bb1273
• chore(deps): update module google.golang.org/protobuf to v1.36.11
• chore(deps): update golang docker tag to v1.26
• chore(deps): update module github.com/prometheus/common to v0.70.1
• fix(deps): update module github.com/urfave/cli/v3 to v3.10.1
• chore(deps): update actions/attest-build-provenance action to v4
• chore(deps): update actions/github-script action to v9
• Click on this checkbox to rebase all open PRs at once

PR Closed (Blocked)

The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.

• fix(deps): update module github.com/stretchr/testify to v1.11.1

Vulnerabilities

Important

1/1 CVEs have Renovate fixes.

gomod

go.mod

golang.org/x/sys

• GO-2026-5024 (fixed in >= 0.44.0)

Detected Dependencies

dockerfile (1)

Dockerfile (2)

• golang 1.24-alpine → [Updates: 1.26-alpine, 1.24-alpine]
• alpine edge → [Updates: edge]

github-actions (6)

.github/workflows/build.yaml (2)

• actions/checkout v4 → [Updates: v7, v4]
• actions/setup-go v5 → [Updates: v7, v5]

.github/workflows/docker.yaml (3)

• actions/checkout v4 → [Updates: v7, v4]
• actions/attest-build-provenance v2 → [Updates: v4, v2]
• mshick/add-pr-comment v2@b8f338c590a895d50bcbfa6c5859251edc8952fc → [Updates: v3]

.github/workflows/ghcr-cleanup.yaml (2)

• snok/container-retention-policy v3.0.0@4f22ef80902ad409ed55a99dc5133cc1250a0d03 → [Updates: v3.1.0]
• actions/github-script v7 → [Updates: v9, v7]

.github/workflows/helm.yaml (2)

• actions/checkout v4 → [Updates: v7, v4]
• azure/setup-helm v4@b9e51907a09c216f16ebe8536097933489208112 → [Updates: v5, v4]

.github/workflows/release.yaml (9)

• actions/checkout v4 → [Updates: v7, v4]
• azure/setup-helm v4@b9e51907a09c216f16ebe8536097933489208112 → [Updates: v5, v4]
• actions/upload-artifact v4 → [Updates: v7, v4]
• actions/checkout v4 → [Updates: v7, v4]
• actions/setup-go v5 → [Updates: v7, v5]
• actions/upload-artifact v4 → [Updates: v7, v4]
• actions/checkout v4 → [Updates: v7, v4]
• actions/download-artifact v4 → [Updates: v8, v4]
• softprops/action-gh-release v2@72f2c25fcb47643c292f7107632f7a47c1df5cd8 → [Updates: v3, v2]

.github/workflows/test.yaml (11)

• actions/checkout v4 → [Updates: v7, v4]
• actions/setup-go v5 → [Updates: v7, v5]
• actions/checkout v4 → [Updates: v7, v4]
• actions/setup-go v5 → [Updates: v7, v5]
• actions/checkout v4 → [Updates: v7, v4]
• actions/setup-go v5 → [Updates: v7, v5]
• golangci/golangci-lint-action v8@4afd733a84b1f43292c63897423277bb7f4313a9 → [Updates: v9]
• actions/checkout v4 → [Updates: v7, v4]
• bats-core/bats-action 3.0.1@42fcc8700f773c075a16a90eb11674c0318ad507 → [Updates: 4.0.0]
• actions/checkout v4 → [Updates: v7, v4]
• bats-core/bats-action 3.0.1@42fcc8700f773c075a16a90eb11674c0318ad507 → [Updates: 4.0.0]

gomod (1)

go.mod (17)

• go 1.24.5
• github.com/prometheus/client_golang v1.23.0 → [Updates: v1.24.0]
• github.com/stretchr/testify v1.10.0 → [Updates: v1.11.1]
• github.com/urfave/cli/v3 v3.3.8 → [Updates: v3.10.1]
• golang.org/x/sync v0.13.0 → [Updates: v0.22.0]
• github.com/beorn7/perks v1.0.1
• github.com/cespare/xxhash/v2 v2.3.0
• github.com/davecgh/go-spew v1.1.1
• github.com/kr/text v0.2.0
• github.com/munnerz/goautoneg v0.0.0-20191010083416-a7dc8b61c822@a7dc8b61c822
• github.com/pmezard/go-difflib v1.0.0
• github.com/prometheus/client_model v0.6.2
• github.com/prometheus/common v0.65.0 → [Updates: v0.70.1]
• github.com/prometheus/procfs v0.16.1 → [Updates: v0.21.1]
• golang.org/x/sys v0.33.0 → [Updates: v0.44.0]
• google.golang.org/protobuf v1.36.6 → [Updates: v1.36.11]
• gopkg.in/yaml.v3 v3.0.1

helm-values (1)

helm/values.yaml (1)

• ghcr.io/grafana/seccomp-daemonset latest → [Updates: latest]

---

Need help?

You can ask for more help in the following Slack channel: #proj-renovate-self-hosted. In that channel you can also find ADR and FAQ docs in the Resources section.