Dependency Dashboard

[renovate-sh-app]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Abandoned Dependencies

The following dependencies have not received updates for an extended period and may be unmaintained.

View abandoned dependencies (19)

[!NOTE]
Packages are marked as abandoned when they exceed the abandonmentThreshold since their last release. Unlike deprecated packages with official notices, abandonment is detected by release inactivity.

Datasource	Package	Last Updated
gomod	github.com/beorn7/perks	2019-07-31
gomod	github.com/cespare/xxhash/v2	2024-04-04
gomod	github.com/go-kit/log	2022-05-14
gomod	github.com/go-logr/stdr	2021-12-15
gomod	github.com/gogo/googleapis	2021-03-16
gomod	github.com/gogo/protobuf	2021-01-10
gomod	github.com/gogo/status	2022-06-15
gomod	github.com/golang/protobuf	2024-03-06
gomod	github.com/google/uuid	2024-01-23
gomod	github.com/gorilla/mux	2023-11-05
gomod	github.com/jpillora/backoff	2019-10-03
gomod	github.com/munnerz/goautoneg	2019-10-10
gomod	github.com/mwitkow/go-conntrack	2019-07-16
gomod	github.com/opentracing/opentracing-go	2020-07-01
gomod	github.com/pkg/errors	2020-01-14
gomod	github.com/uber/jaeger-client-go	2021-12-07
gomod	github.com/uber/jaeger-lib	2021-03-29
gomod	go.opentelemetry.io/otel/exporters/jaeger	2023-08-28
gomod	go.uber.org/atomic	2023-05-03

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• chore(deps): pin dependencies (github.com/grafana/agent/production/tanka/grafana-agent, github.com/grafana/jsonnet-libs/grafana-builder, github.com/grafana/jsonnet-libs/grizzly, github.com/grafana/jsonnet-libs/ksonnet-util, github.com/grafana/jsonnet-libs/nginx-directory, github.com/grafana/jsonnet-libs/node-exporter, github.com/grafana/jsonnet-libs/prometheus-ksonnet, github.com/grafana/loki/production/ksonnet/promtail, github.com/jsonnet-libs/k8s-libsonnet/1.22, github.com/ksonnet/ksonnet-lib/ksonnet.beta.4, golang, grafana/grafana, grafana/tns-app, grafana/tns-db, grafana/tns-loadgen)
• chore(deps): update grafana/loki docker tag to v3.7.7
• chore(deps): update module github.com/go-logr/logr to v1.4.4
• chore(deps): update module go.yaml.in/yaml/v3 to v3.0.5
• chore(deps): update module google.golang.org/protobuf to v1.36.12
• chore(deps): update actions/checkout action to v4.4.0
• chore(deps): update module github.com/coreos/go-systemd/v22 to v22.7.0
• chore(deps): update module github.com/felixge/httpsnoop to v1.1.0
• chore(deps): update module github.com/fsnotify/fsnotify to v1.10.1
• chore(deps): update module github.com/go-logfmt/logfmt to v0.6.1
• chore(deps): update module github.com/grafana/otel-profiling-go to v0.6.0
• chore(deps): update module github.com/grpc-ecosystem/grpc-gateway/v2 to v2.30.0
• chore(deps): update module github.com/jaegertracing/jaeger-idl to v0.11.1
• chore(deps): update module github.com/mdlayher/socket to v0.6.1
• chore(deps): update module github.com/mdlayher/vsock to v1.3.0
• chore(deps): update module github.com/pires/go-proxyproto to v0.15.0
• chore(deps): update module github.com/prometheus/common to v0.70.1
• chore(deps): update module github.com/prometheus/exporter-toolkit to v0.19.0
• chore(deps): update module github.com/prometheus/procfs to v0.22.0
• chore(deps): update module go.opentelemetry.io/proto/otlp to v1.11.0
• chore(deps): update module golang.org/x/oauth2 to v0.36.0
• chore(deps): update module golang.org/x/sync to v0.22.0
• chore(deps): update module golang.org/x/sys to v0.47.0
• chore(deps): update opentelemetry-go monorepo (go.opentelemetry.io/otel, go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc, go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp, go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc, go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp, go.opentelemetry.io/otel/exporters/otlp/otlptrace, go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc, go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp, go.opentelemetry.io/otel/exporters/prometheus, go.opentelemetry.io/otel/exporters/stdout/stdoutlog, go.opentelemetry.io/otel/exporters/stdout/stdoutmetric, go.opentelemetry.io/otel/exporters/stdout/stdouttrace, go.opentelemetry.io/otel/log, go.opentelemetry.io/otel/metric, go.opentelemetry.io/otel/sdk, go.opentelemetry.io/otel/sdk/log, go.opentelemetry.io/otel/sdk/metric, go.opentelemetry.io/otel/trace)
• chore(deps): update opentelemetry-go-contrib monorepo (go.opentelemetry.io/contrib/bridges/prometheus, go.opentelemetry.io/contrib/exporters/autoexport, go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc, go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace, go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp, go.opentelemetry.io/contrib/propagators/jaeger, go.opentelemetry.io/contrib/samplers/jaegerremote)
• chore(deps): update prom/node-exporter docker tag to v1.12.1
• chore(deps): update prom/prometheus docker tag to v3.14.0
• fix(deps): update module github.com/prometheus/client_golang to v1.24.1
• chore(deps): update module github.com/cenkalti/backoff/v5 to v7
• chore(deps): update module go.yaml.in/yaml/v2 to v3
• chore(deps): lock file maintenance
• 🔐 Create all rate-limited PRs at once 🔐

Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

• fix(deps): update github.com/grafana/dskit digest to 423ea21
• chore(deps): update module github.com/prometheus/client_model to v0.6.3
• chore(deps): update gcr.io/cadvisor/cadvisor docker tag to v0.55.1

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• fix(security/unknown/): update module github.com/klauspost/compress to v1.18.7 [security]
• fix(security/unknown/): update module golang.org/x/crypto to v0.55.0 [security]
• fix(security/unknown/): update module golang.org/x/net to v0.56.0 [security]
• fix(security/unknown/): update module golang.org/x/text to v0.39.0 [security]
• fix(security/unknown/): update module google.golang.org/grpc to v1.82.1 [security]
• chore(deps): update alpine:3.23 docker digest to fd791d7
• chore(deps): update google.golang.org/genproto digest to da73d73
• chore(deps): update grafana/shared-workflows/login-to-gar action to v1.0.3
• chore(deps): update grafana/tempo docker tag to v3.0.3
• chore(deps): update module github.com/golang-jwt/jwt/v5 to v5.3.1
• chore(deps): update module github.com/grafana/pyroscope-go/godeltaprof to v0.1.12
• chore(deps): update module github.com/opentracing-contrib/go-grpc to v0.1.4
• chore(deps): update alpine docker tag to v3.24
• chore(deps): update golang docker tag to v1.24.6
• chore(deps): update actions/checkout action to v7
• Click on this checkbox to rebase all open PRs at once

Vulnerabilities

Important

6/7 CVEs have Renovate fixes.

gomod

go.mod

github.com/klauspost/compress

• GO-2026-5841 (fixed in >= 1.18.7)

golang.org/x/crypto

• GO-2026-5932
• GO-2026-6303 (fixed in >= 0.55.0)

golang.org/x/net

• GO-2026-5942 (fixed in >= 0.56.0)

golang.org/x/text

• GO-2026-5970 (fixed in >= 0.39.0)

google.golang.org/grpc

• GHSA-hrxh-6v49-42gf (fixed in >= 1.82.1)
• GO-2026-6061 (fixed in >= 1.82.1)

Detected Dependencies

circleci (1)

.circleci/config.yml (4)

• golang 1.23.2-bullseye → [Updates: 1.24.6-bullseye, 1.23.2-bullseye]
• golang 1.23.2-bullseye → [Updates: 1.24.6-bullseye, 1.23.2-bullseye]
• grafana/tns-lint cad1c20@sha256:52cb50ca5b3ee26e236ea33f45e8359dc92ed18591827807e82466e98a9d4f6b
• golang 1.23.2-bullseye → [Updates: 1.24.6-bullseye, 1.23.2-bullseye]

docker-compose (1)

production/docker-compose/docker-compose.yml (9)

• grafana/tns-db 47b160f → [Updates: 47b160f]
• grafana/tns-app 47b160f → [Updates: 47b160f]
• grafana/tns-loadgen 47b160f → [Updates: 47b160f]
• grafana/grafana 12.3.0-18392635519-ubuntu → [Updates: 12.3.0-18392635519-ubuntu]
• prom/prometheus v3.12.0@sha256:69f5241418838263316593f7274a304b095c40bcf22e57272865da91bd60a8ac → [Updates: v3.14.0]
• gcr.io/cadvisor/cadvisor v0.52.1@sha256:f40e65878e25c2e78ea037f73a449527a0fb994e303dc3e34cb6b187b4b91435 → [Updates: v0.55.1]
• prom/node-exporter v1.11.1@sha256:e9cff4fc67b1818f8c97adb115b9f12c9a54b533de86765d4a0effc01b357205 → [Updates: v1.12.1]
• grafana/loki 3.7.2@sha256:191d4fdfb7264f16989f0a57f320872620a5a7c2ceeec6229212c4190ec49b86 → [Updates: 3.7.7]
• grafana/tempo 3.0.0@sha256:78439f7f7cf3c97122846c13a832e060c6c7ef67dcc814dccf0a5f3f78393a93 → [Updates: 3.0.3]

dockerfile (4)

app/Dockerfile (1)

• alpine 3.23@sha256:5b10f432ef3da1b8d4c7eb6c487f2f5a8f096bc91145e68878dd4a5019afde11 → [Updates: 3.24, 3.23]

db/Dockerfile (1)

• alpine 3.23@sha256:5b10f432ef3da1b8d4c7eb6c487f2f5a8f096bc91145e68878dd4a5019afde11 → [Updates: 3.24, 3.23]

lint-image/Dockerfile (3)

• alpine 3.23@sha256:5b10f432ef3da1b8d4c7eb6c487f2f5a8f096bc91145e68878dd4a5019afde11 → [Updates: 3.24, 3.23]
• golang 1.14.1-alpine3.11 → [Updates: 1.14.1-alpine3.11]
• alpine 3.23@sha256:5b10f432ef3da1b8d4c7eb6c487f2f5a8f096bc91145e68878dd4a5019afde11 → [Updates: 3.24, 3.23]

loadgen/Dockerfile (1)

• alpine 3.23@sha256:5b10f432ef3da1b8d4c7eb6c487f2f5a8f096bc91145e68878dd4a5019afde11 → [Updates: 3.24, 3.23]

github-actions (1)

.github/workflows/build-and-push-images.yml (2)

• actions/checkout v4.3.1@34e114876b0b11c390a56381ad16ebd13914f8d5 → [Updates: v4.4.0, v7.0.1]
• grafana/shared-workflows login-to-gar/v1.0.2@12c87e5aa323694c820c1ff3d8e47e8237e05136 → [Updates: login-to-gar/v1.0.3]

gomod (1)

go.mod (85)

• github.com/go-kit/log v0.2.1
• github.com/grafana/dskit v0.0.0-20260604174821-a213f6f409cd@a213f6f409cd → [Updates: v0.0.0-20260604174821-a213f6f409cd]
• github.com/opentracing-contrib/go-stdlib v1.1.1
• github.com/opentracing/opentracing-go v1.2.0
• github.com/prometheus/client_golang v1.23.2 → [Updates: v1.24.1]
• github.com/alecthomas/units v0.0.0-20240927000941-0f3dac36c52b@0f3dac36c52b
• github.com/beorn7/perks v1.0.1
• github.com/cenkalti/backoff/v5 v5.0.3 → [Updates: v7.0.0]
• github.com/cespare/xxhash/v2 v2.3.0
• github.com/coreos/go-systemd/v22 v22.6.0 → [Updates: v22.7.0]
• github.com/felixge/httpsnoop v1.0.4 → [Updates: v1.1.0]
• github.com/fsnotify/fsnotify v1.9.0 → [Updates: v1.10.1]
• github.com/go-logfmt/logfmt v0.5.1 → [Updates: v0.6.1]
• github.com/go-logr/logr v1.4.3 → [Updates: v1.4.4]
• github.com/go-logr/stdr v1.2.2
• github.com/gogo/googleapis v1.4.1
• github.com/gogo/protobuf v1.3.2
• github.com/gogo/status v1.1.1
• github.com/golang-jwt/jwt/v5 v5.3.0 → [Updates: v5.3.1]
• github.com/golang/protobuf v1.5.4
• github.com/google/uuid v1.6.0
• github.com/gorilla/mux v1.8.1
• github.com/grafana/otel-profiling-go v0.5.1 → [Updates: v0.6.0]
• github.com/grafana/pyroscope-go/godeltaprof v0.1.9 → [Updates: v0.1.12]
• github.com/grpc-ecosystem/grpc-gateway/v2 v2.28.0 → [Updates: v2.30.0]
• github.com/jaegertracing/jaeger-idl v0.6.0 → [Updates: v0.11.1]
• github.com/jpillora/backoff v1.0.0
• github.com/klauspost/compress v1.18.0 → [Updates: v1.18.7]
• github.com/mdlayher/socket v0.4.1 → [Updates: v0.6.1]
• github.com/mdlayher/vsock v1.2.1 → [Updates: v1.3.0]
• github.com/munnerz/goautoneg v0.0.0-20191010083416-a7dc8b61c822@a7dc8b61c822
• github.com/mwitkow/go-conntrack v0.0.0-20190716064945-2f068394615f@2f068394615f
• github.com/opentracing-contrib/go-grpc v0.1.2 → [Updates: v0.1.4]
• github.com/pires/go-proxyproto v0.11.0 → [Updates: v0.15.0]
• github.com/pkg/errors v0.9.1
• github.com/prometheus/client_model v0.6.2 → [Updates: v0.6.3]
• github.com/prometheus/common v0.67.5 → [Updates: v0.70.1]
• github.com/prometheus/exporter-toolkit v0.15.1 → [Updates: v0.19.0]
• github.com/prometheus/otlptranslator v1.0.0
• github.com/prometheus/procfs v0.20.1 → [Updates: v0.22.0]
• github.com/sercand/kuberesolver/v6 v6.0.1
• github.com/uber/jaeger-client-go v2.30.0+incompatible
• github.com/uber/jaeger-lib v2.4.1+incompatible
• go.opentelemetry.io/auto/sdk v1.2.1
• go.opentelemetry.io/contrib/bridges/prometheus v0.68.0 → [Updates: v0.71.0]
• go.opentelemetry.io/contrib/exporters/autoexport v0.68.0 → [Updates: v0.71.0]
• go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.67.0 → [Updates: v0.71.0]
• go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace v0.67.0 → [Updates: v0.71.0]
• go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.67.0 → [Updates: v0.71.0]
• go.opentelemetry.io/contrib/propagators/jaeger v1.42.0 → [Updates: v1.46.0]
• go.opentelemetry.io/contrib/samplers/jaegerremote v0.36.0 → [Updates: v0.37.3]
• go.opentelemetry.io/otel v1.44.0 → [Updates: v1.46.0]
• go.opentelemetry.io/otel/exporters/jaeger v1.17.0
• go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc v0.19.0 → [Updates: v0.22.0]
• go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp v0.19.0 → [Updates: v0.22.0]
• go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc v1.43.0 → [Updates: v1.46.0]
• go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp v1.43.0 → [Updates: v1.46.0]
• go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.43.0 → [Updates: v1.46.0]
• go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.43.0 → [Updates: v1.46.0]
• go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.43.0 → [Updates: v1.46.0]
• go.opentelemetry.io/otel/exporters/prometheus v0.65.0 → [Updates: v0.68.0]
• go.opentelemetry.io/otel/exporters/stdout/stdoutlog v0.19.0 → [Updates: v0.22.0]
• go.opentelemetry.io/otel/exporters/stdout/stdoutmetric v1.43.0 → [Updates: v1.46.0]
• go.opentelemetry.io/otel/exporters/stdout/stdouttrace v1.43.0 → [Updates: v1.46.0]
• go.opentelemetry.io/otel/log v0.19.0 → [Updates: v0.22.0]
• go.opentelemetry.io/otel/metric v1.44.0 → [Updates: v1.46.0]
• go.opentelemetry.io/otel/sdk v1.44.0 → [Updates: v1.46.0]
• go.opentelemetry.io/otel/sdk/log v0.19.0 → [Updates: v0.22.0]
• go.opentelemetry.io/otel/sdk/metric v1.44.0 → [Updates: v1.46.0]
• go.opentelemetry.io/otel/trace v1.44.0 → [Updates: v1.46.0]
• go.opentelemetry.io/proto/otlp v1.10.0 → [Updates: v1.11.0]
• go.uber.org/atomic v1.11.0
• go.yaml.in/yaml/v2 v2.4.4 → [Updates: v3.0.5]
• go.yaml.in/yaml/v3 v3.0.4 → [Updates: v3.0.5]
• golang.org/x/crypto v0.52.0 → [Updates: v0.55.0]
• golang.org/x/net v0.55.0 → [Updates: v0.56.0]
• golang.org/x/oauth2 v0.35.0 → [Updates: v0.36.0]
• golang.org/x/sync v0.20.0 → [Updates: v0.22.0]
• golang.org/x/sys v0.45.0 → [Updates: v0.47.0]
• golang.org/x/text v0.37.0 → [Updates: v0.39.0]
• golang.org/x/time v0.15.0
• google.golang.org/genproto v0.0.0-20230110181048-76db0878b65f@76db0878b65f → [Updates: v0.0.0-20260825221802-da73d73af1c5]
• google.golang.org/grpc v1.80.0 → [Updates: v1.82.1]
• google.golang.org/protobuf v1.36.11 → [Updates: v1.36.12]
• go 1.25.8

jsonnet-bundler (2)

production/sample/jsonnetfile.json (8)

• github.com/grafana/agent/production/tanka/grafana-agent main → [Updates: main]
• github.com/grafana/jsonnet-libs/ksonnet-util master → [Updates: master]
• github.com/grafana/jsonnet-libs/nginx-directory master → [Updates: master]
• github.com/grafana/jsonnet-libs/node-exporter master → [Updates: master]
• github.com/grafana/jsonnet-libs/prometheus-ksonnet master → [Updates: master]
• github.com/grafana/loki/production/ksonnet/promtail main → [Updates: main]
• github.com/jsonnet-libs/k8s-libsonnet/1.22 main → [Updates: main]
• github.com/ksonnet/ksonnet-lib/ksonnet.beta.4 master → [Updates: master]

production/tns-mixin/jsonnetfile.json (2)

• github.com/grafana/jsonnet-libs/grafana-builder master → [Updates: master]
• github.com/grafana/jsonnet-libs/grizzly master → [Updates: master]

---

Need help?

You can ask for more help in the following Slack channel: #proj-renovate-self-hosted. In that channel you can also find ADR and FAQ docs in the Resources section.