Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Config Migration Needed

• Select this checkbox to let Renovate create an automated Config Migration PR.

---

Warning

Renovate failed to look up the following dependencies: Could not determine new digest for update (github-tags package siderolabs/conform).

Files affected: .github/workflows/verify.yml

---

This repository currently has no open or pending branches.

Detected dependencies

dockerfile

Dockerfile

• gcr.io/distroless/static-debian12 nonroot@sha256:b35229a3a6398fe8f86138c74c611e386f128c20378354fc5442811700d5600d

github-actions

.github/workflows/codeql.yml

• step-security/harden-runner v2.11.0@4d991eb9b905ef189e4c376166672c3f2f230481
• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• github/codeql-action v3.28.12@5f8171a638ada777af81d42b55959a643bb29017
• github/codeql-action v3.28.12@5f8171a638ada777af81d42b55959a643bb29017
• github/codeql-action v3.28.12@5f8171a638ada777af81d42b55959a643bb29017

.github/workflows/dependency_review.yml

• step-security/harden-runner v2.11.0@4d991eb9b905ef189e4c376166672c3f2f230481
• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/dependency-review-action v4.5.0@3b139cfc5fae8b618d3eae3675e383bb1769c019

.github/workflows/release.yml

• step-security/harden-runner v2.11.0@4d991eb9b905ef189e4c376166672c3f2f230481
• googleapis/release-please-action v4.2.0@a02a34c4d625f9be7cb89156071d8567266a2445
• step-security/harden-runner v2.11.0@4d991eb9b905ef189e4c376166672c3f2f230481
• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/setup-go v5.4.0@0aaccfd150d50ccaeb58ebd88d36e91967a5f35b
• sigstore/cosign-installer v3.8.1@d7d6bc7722e3daa8354c50bcb52f4837da5e9b6a
• anchore/sbom-action v0.18.0@f325610c9f50a54015d37c8d16cb3b0e2c8f4de0
• docker/setup-qemu-action v3.6.0@29109295f81e9208d7d86ff1c6c12d2833863392
• docker/setup-buildx-action v3.10.0@b5ca514318bd6ebac0fb2aedd5d36ec1b5c232a2
• docker/login-action v3.4.0@74a5d142397b4f367a81961eba4e8cd7edddf772
• goreleaser/goreleaser-action v6.2.1@90a3faa9d0182683851fbfa97ca1a2cb983bfca3
• actions/attest-build-provenance v2.2.3@c074443f1aee8d4aeeae555aebba3282517141b2
• actions/attest-build-provenance v2.2.3@c074443f1aee8d4aeeae555aebba3282517141b2

.github/workflows/scorecard.yml

• step-security/harden-runner v2.11.0@4d991eb9b905ef189e4c376166672c3f2f230481
• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• ossf/scorecard-action v2.4.1@f49aabe0b5af0936a0987cfb85d86b75731b0186
• actions/upload-artifact v4.6.2@ea165f8d65b6e75b540449e92b4886f43607fa02
• github/codeql-action v3.28.12@5f8171a638ada777af81d42b55959a643bb29017

.github/workflows/verify.yml

• step-security/harden-runner v2.11.0@4d991eb9b905ef189e4c376166672c3f2f230481
• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• siderolabs/conform v0.1.0@6380738b7fdfc68b208ce0674c4ac1ba314ba600
• step-security/harden-runner v2.11.0@4d991eb9b905ef189e4c376166672c3f2f230481
• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/setup-go v5.4.0@0aaccfd150d50ccaeb58ebd88d36e91967a5f35b
• golangci/golangci-lint-action v6.5.2@55c2c1448f86e01eaae002a5a3a9624417608d84
• step-security/harden-runner v2.11.0@4d991eb9b905ef189e4c376166672c3f2f230481
• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/setup-go v5.4.0@0aaccfd150d50ccaeb58ebd88d36e91967a5f35b
• step-security/harden-runner v2.11.0@4d991eb9b905ef189e4c376166672c3f2f230481
• actions/checkout v4@11bd71901bbe5b1630ceea73d27597364c9af683
• hadolint/hadolint-action v3.1.0@54c9adbab1582c2ef04b2016b760714a4bfde3cf
• step-security/harden-runner v2.11.0@4d991eb9b905ef189e4c376166672c3f2f230481
• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/setup-go v5.4.0@0aaccfd150d50ccaeb58ebd88d36e91967a5f35b
• sigstore/cosign-installer v3.8.1@d7d6bc7722e3daa8354c50bcb52f4837da5e9b6a
• anchore/sbom-action v0.18.0@f325610c9f50a54015d37c8d16cb3b0e2c8f4de0
• docker/setup-qemu-action v3.6.0@29109295f81e9208d7d86ff1c6c12d2833863392
• docker/setup-buildx-action v3.10.0@b5ca514318bd6ebac0fb2aedd5d36ec1b5c232a2
• goreleaser/goreleaser-action v6.2.1@90a3faa9d0182683851fbfa97ca1a2cb983bfca3

gomod

go.mod

• go 1.24.0
• go 1.24.1
• github.com/caarlos0/env/v11 v11.3.1
• github.com/go-chi/chi/v5 v5.2.1
• github.com/sirupsen/logrus v1.9.3
• github.com/stretchr/testify v1.10.0
• golang.org/x/exp v0.0.0-20250305212735-054e65f0b394@054e65f0b394
• sigs.k8s.io/external-dns v0.16.1

---

• Check this box to trigger a request for Renovate to run again on this repository