Dependency Dashboard

[renovate-sh-app]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Note

These dependencies have not received updates for an extended period and may be unmaintained:

View abandoned dependencies (4)

Datasource	Name	Last Updated
gomod	github.com/go-slog/otelslog	2024-10-20
gomod	github.com/google/uuid	2024-01-23
gomod	github.com/gregjones/httpcache	2019-06-11
gomod	github.com/mattn/go-isatty	2023-10-17

Packages are marked as abandoned when they exceed the abandonmentThreshold since their last release.
Unlike deprecated packages with official notices, abandonment is detected by release inactivity.

Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

• chore(deps): update anchore/sbom-action action to v0.20.11
• fix(deps): update module k8s.io/client-go to v0.34.3
• chore(deps): update step-security/harden-runner action to v2.14.0
• fix(deps): update opentelemetry-go-contrib monorepo (go.opentelemetry.io/contrib/bridges/otelslog, go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace, go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp, go.opentelemetry.io/contrib/instrumentation/runtime)
• chore(deps): update actions/cache action to v5
• chore(deps): update davidanson/markdownlint-cli2-action action to v22

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• fix(deps): update opentelemetry-go monorepo (go.opentelemetry.io/otel, go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc, go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc, go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc, go.opentelemetry.io/otel/exporters/stdout/stdoutmetric, go.opentelemetry.io/otel/exporters/stdout/stdouttrace, go.opentelemetry.io/otel/log, go.opentelemetry.io/otel/metric, go.opentelemetry.io/otel/sdk, go.opentelemetry.io/otel/sdk/log, go.opentelemetry.io/otel/sdk/metric, go.opentelemetry.io/otel/trace)

Vulnerabilities

Renovate has not found any CVEs on osv.dev.

Detected Dependencies

docker-compose

docker-compose.yml

dockerfile

Dockerfile

• golang 1.25.5-alpine3.21@sha256:b4dbd292a0852331c89dfd64e84d16811f3e3aae4c73c13d026c4d200715aff6

github-actions

.github/workflows/build.yml

• step-security/harden-runner v2.13.3@df199fb7be9f65074067a9eb93f12bb4c5547cf2
• actions/github-script v8.0.0@ed597411d8f924073f98dfc5c65a23a2325f34cd
• actions/checkout v6.0.1@8e8c483db84b4bee98b60c0593521ed34d9990e8
• docker/login-action v3.6.0@5e57cd118135c172c3672efd75eb46360885c0ef
• docker/setup-buildx-action v3.11.1@e468171a9de216ec08956ac3ada2f0791b6bd435
• docker/build-push-action v6.18.0@263435318d21b8e681c14492fe198d362a7d2c83
• anchore/sbom-action v0.20.10@fbfd9c6c189226748411491745178e0c2017392d
• actions/attest-sbom v3.0.0@4651f806c01d8637787e274ac3bdf724ef169f34
• actions/upload-artifact v5.0.0@330a01c490aca151604b8cf639adc76d48f6c5d4
• step-security/harden-runner v2.13.3@df199fb7be9f65074067a9eb93f12bb4c5547cf2
• actions/download-artifact v6.0.0@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53
• docker/metadata-action v5.10.0@c299e40c65443455700f0fdfc63efafe5b349051
• docker/login-action v3.6.0@5e57cd118135c172c3672efd75eb46360885c0ef
• actions/attest-build-provenance v3.0.0@977bb373ede98d70efdf65b84cb5f73e068dcc2a
• ubuntu 24.04

.github/workflows/codeql.yml

• step-security/harden-runner v2.13.3@df199fb7be9f65074067a9eb93f12bb4c5547cf2
• actions/checkout v6.0.1@8e8c483db84b4bee98b60c0593521ed34d9990e8
• github/codeql-action v4.31.7@cf1bb45a277cb3c205638b2cd5c984db1c46a412
• github/codeql-action v4.31.7@cf1bb45a277cb3c205638b2cd5c984db1c46a412
• github/codeql-action v4.31.7@cf1bb45a277cb3c205638b2cd5c984db1c46a412

.github/workflows/dependency-review.yml

• step-security/harden-runner v2.13.3@df199fb7be9f65074067a9eb93f12bb4c5547cf2
• actions/checkout v6.0.1@8e8c483db84b4bee98b60c0593521ed34d9990e8
• actions/dependency-review-action v4@3c4e3dcb1aa7874d2c16be7d79418e9b7efd6261

.github/workflows/scorecards.yml

• step-security/harden-runner v2.13.3@df199fb7be9f65074067a9eb93f12bb4c5547cf2
• actions/checkout v6.0.1@8e8c483db84b4bee98b60c0593521ed34d9990e8
• ossf/scorecard-action v2.4.3@4eaacf0543bb3f2c246792bd56e8cdeffafb205a
• actions/upload-artifact v5.0.0@330a01c490aca151604b8cf639adc76d48f6c5d4
• github/codeql-action v4.31.7@cf1bb45a277cb3c205638b2cd5c984db1c46a412

.github/workflows/test-lint.yml

• step-security/harden-runner v2.13.3@df199fb7be9f65074067a9eb93f12bb4c5547cf2
• actions/checkout v6.0.1@8e8c483db84b4bee98b60c0593521ed34d9990e8
• actions/setup-go v6.1.0@4dc6199c7b1a012772edbd06daecab0f50c9053c
• golangci/golangci-lint-action v9.2.0@1e7e51e771db61008b38414a730f564565cf7c20
• step-security/harden-runner v2.13.3@df199fb7be9f65074067a9eb93f12bb4c5547cf2
• actions/checkout v6.0.1@8e8c483db84b4bee98b60c0593521ed34d9990e8
• DavidAnson/markdownlint-cli2-action v21.0.0@30a0e04f1870d58f8d717450cc6134995f993c63
• actions/cache v4.3.0@0057852bfaa89a56745cba8c7296529d2fc39830
• astral-sh/setup-uv v7.1.5@ed21f2f24f8dd64503750218de024bcf64c7250a
• github/codeql-action v4.31.7@cf1bb45a277cb3c205638b2cd5c984db1c46a412

gomod

go.mod

• go 1.25.0
• github.com/alecthomas/kong v1.13.0
• github.com/bradleyfalzon/ghinstallation/v2 v2.17.0
• github.com/fluxcd/kustomize-controller/api v1.7.3
• github.com/go-logr/logr v1.4.3
• github.com/go-slog/otelslog v0.3.0
• github.com/google/go-github/v80 v80.0.0
• github.com/google/uuid v1.6.0
• github.com/gregjones/httpcache v0.0.0-20190611155906-901d90724c79@901d90724c79
• github.com/hashicorp/go-retryablehttp v0.7.8
• github.com/lmittmann/tint v1.1.2
• github.com/mattn/go-isatty v0.0.20
• github.com/migueleliasweb/go-github-mock v1.5.0
• github.com/samber/slog-multi v1.6.0
• github.com/stretchr/testify v1.11.1
• go.opentelemetry.io/contrib/bridges/otelslog v0.13.0
• go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace v0.63.0
• go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.63.0
• go.opentelemetry.io/contrib/instrumentation/runtime v0.63.0
• go.opentelemetry.io/otel v1.38.0
• go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc v0.14.0
• go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc v1.38.0
• go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.38.0
• go.opentelemetry.io/otel/exporters/stdout/stdoutmetric v1.38.0
• go.opentelemetry.io/otel/exporters/stdout/stdouttrace v1.38.0
• go.opentelemetry.io/otel/log v0.14.0
• go.opentelemetry.io/otel/metric v1.38.0
• go.opentelemetry.io/otel/sdk v1.38.0
• go.opentelemetry.io/otel/sdk/log v0.14.0
• go.opentelemetry.io/otel/sdk/metric v1.38.0
• go.opentelemetry.io/otel/trace v1.38.0
• golang.org/x/oauth2 v0.34.0
• k8s.io/apimachinery v0.34.3
• k8s.io/client-go v0.34.2
• sigs.k8s.io/controller-runtime v0.22.4

---

Need help?

You can ask for more help in the following Slack channel: #proj-renovate-self-hosted. In that channel you can also find ADR and FAQ docs in the Resources section.