Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• Update k8s.io/utils digest to cf1189d

Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

• Update actions/setup-go action to v7

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• Update gcr.io/distroless/static:nonroot Docker digest to f7f8f72
• Update github actions dependencies (docker/login-action, github/codeql-action)
• Update kubernetes monorepo to v0.36.3 (k8s.io/api, k8s.io/apiextensions-apiserver, k8s.io/apimachinery, k8s.io/apiserver, k8s.io/client-go)
• Update module github.com/fluxcd/helm-controller/api to v1.6.3
• Update module github.com/fluxcd/image-reflector-controller/api to v1.2.4
• Update module github.com/fluxcd/source-controller/api to v1.9.4
• Update module github.com/go-logr/logr to v1.4.4
• Update module helm.sh/helm/v4 to v4.2.4
• Update module sigs.k8s.io/structured-merge-diff/v6 to v6.4.2
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

dockerfile (1)

Dockerfile (1)

• gcr.io/distroless/static nonroot@sha256:963fa6c544fe5ce420f1f54fb88b6fb01479f054c8056d0f74cc2c6000df5240 → [Updates: nonroot]

github-actions (5)

.github/workflows/build.yml (2)

• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/setup-go v6@924ae3a1cded613372ab5595356fb5720e22ba16 → [Updates: v7]

.github/workflows/govulncheck.yml (3)

• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/setup-go v6@924ae3a1cded613372ab5595356fb5720e22ba16 → [Updates: v7]
• github/codeql-action v4.37.3@e4fba868fa4b1b91e1fdab776edc8cfbe6e9fb81 → [Updates: v4.37.6]

.github/workflows/lint.yml (2)

• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/setup-go v6@924ae3a1cded613372ab5595356fb5720e22ba16 → [Updates: v7]

.github/workflows/release.yml (8)

• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/setup-go v6@924ae3a1cded613372ab5595356fb5720e22ba16 → [Updates: v7]
• sigstore/cosign-installer v4.1.2@6f9f17788090df1f26f669e9d70d6ae9567deba6
• docker/setup-qemu-action v4@96fe6ef7f33517b61c61be40b68a1882f3264fb8
• docker/setup-buildx-action v4@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c
• docker/login-action v4@650006c6eb7dba73a995cc03b0b2d7f5ca915bee → [Updates: v4]
• mikepenz/release-changelog-builder-action v6@c9bcd8238b6f41e05561348339429d360b1c0247
• goreleaser/goreleaser-action v7@f06c13b6b1a9625abc9e6e439d9c05a8f2190e94

.github/workflows/test.yml (2)

• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/setup-go v6@924ae3a1cded613372ab5595356fb5720e22ba16 → [Updates: v7]

gomod (1)

go.mod (24)

• go 1.26.5
• github.com/Masterminds/semver/v3 v3.5.0
• github.com/fluxcd/helm-controller/api v1.6.2 → [Updates: v1.6.3]
• github.com/fluxcd/image-reflector-controller/api v1.2.1 → [Updates: v1.2.4]
• github.com/fluxcd/source-controller/api v1.9.1 → [Updates: v1.9.4]
• github.com/go-logr/logr v1.4.3 → [Updates: v1.4.4]
• github.com/spf13/cobra v1.10.2
• github.com/stretchr/testify v1.11.1
• go.uber.org/multierr v1.11.0
• go.yaml.in/yaml/v4 v4.0.0-rc.6
• golang.org/x/sync v0.22.0
• helm.sh/helm/v4 v4.2.2 → [Updates: v4.2.4]
• k8s.io/api v0.36.2 → [Updates: v0.36.3]
• k8s.io/apiextensions-apiserver v0.36.2 → [Updates: v0.36.3]
• k8s.io/apimachinery v0.36.2 → [Updates: v0.36.3]
• k8s.io/apiserver v0.36.2 → [Updates: v0.36.3]
• k8s.io/client-go v0.36.2 → [Updates: v0.36.3]
• k8s.io/utils v0.0.0-20260626114624-be93311217bd@be93311217bd → [Updates: v0.0.0-20260707023825-cf1189d6abe3]
• sigs.k8s.io/controller-runtime v0.24.1
• sigs.k8s.io/structured-merge-diff/v6 v6.4.0 → [Updates: v6.4.2]
• sigs.k8s.io/yaml v1.6.0
• sigs.k8s.io/controller-runtime/tools/setup-envtest v0.24.1
• sigs.k8s.io/controller-tools v0.21.0
• sigs.k8s.io/kustomize/kustomize/v5 v5.8.1

helm-values (1)

pkg/schemagen/testdata/charts/juiceshop/values.yaml

kustomize (2)

config/dev/kustomization.yaml

config/proxy/kustomization.yaml (1)

• ghcr.io/helmetica-framework/chrysopoeia v0.1.0-dev17

---

• Check this box to trigger a request for Renovate to run again on this repository