Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Config Migration Needed

• Select this checkbox to let Renovate create an automated Config Migration PR.

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• fix(deps): update golang.org/x/exp digest to 055de63
• fix(deps): update module github.com/open-feature/open-feature-operator/api to v0.2.49
• chore(deps): update busybox docker tag to v1.38.0
• chore(deps): update dependency golangci/golangci-lint to v2.12.2
• fix(deps): update kubernetes monorepo to v0.36.1 (k8s.io/api, k8s.io/apimachinery, k8s.io/client-go)
• fix(deps): update module github.com/stretchr/testify to v1.11.1
• fix(deps): update module sigs.k8s.io/controller-runtime to v0.24.1
• fix(deps): update module sigs.k8s.io/gateway-api to v1.5.1
• chore(deps): update actions/cache action to v5
• chore(deps): update actions/checkout action to v6
• chore(deps): update actions/setup-go action to v6
• chore(deps): update actions/setup-node action to v6
• chore(deps): update amannn/action-semantic-pull-request action to v6
• chore(deps): update codecov/codecov-action action to v6
• chore(deps): update dependency bitnami-labs/readme-generator-for-helm to v3
• chore(deps): update dependency node to v24
• chore(deps): update docker/build-push-action action to v7
• chore(deps): update docker/setup-buildx-action action to v4
• chore(deps): update docker/setup-qemu-action action to v4
• chore(deps): update github artifact actions (major) (actions/download-artifact, actions/upload-artifact)
• chore(deps): update github/codeql-action action to v4
• chore(deps): update golangci/golangci-lint-action action to v9
• chore(deps): update googleapis/release-please-action action to v5
• chore(deps): update marocchino/sticky-pull-request-comment action to v3
• chore(deps): update softprops/action-gh-release action to v3
• 🔐 Create all rate-limited PRs at once 🔐

---

Warning

Renovate failed to look up the following dependencies: Could not determine new digest for update (github-tags package marocchino/sticky-pull-request-comment), Could not determine new digest for update (github-tags package sigstore/cosign-installer), Could not determine new digest for update (go package github.com/open-feature/flagd-schemas).

Files affected: .github/workflows/pr-lint.yml, .github/workflows/release-please.yml, go.mod

---

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): pin dependencies (ad-m/github-push-action, docker/setup-buildx-action, docker/setup-qemu-action)
• fix(deps): update k8s.io/utils digest to ff6756f
• chore(deps): update kyverno/action-install-chainsaw action to v0.2.15
• chore(deps): update aquasecurity/trivy-action action to v0.36.0
• chore(deps): update curlimages/curl docker tag to v8.20.0
• chore(deps): update dependency bitnami-labs/readme-generator-for-helm to v2.8.1
• chore(deps): update dependency kubernetes-sigs/controller-tools to v0.21.0
• chore(deps): update golang docker tag to v1.26
• chore(deps): update open-feature/flagd (ghcr.io/open-feature/flagd, ghcr.io/open-feature/flagd-proxy, open-feature/flagd/flagd, open-feature/flagd/flagd-proxy)
• fix(deps): update module go.uber.org/zap to v1.28.0
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

dockerfile (1)

Dockerfile (1)

• golang 1.25-alpine → [Updates: 1.26-alpine]

github-actions (8)

.github/workflows/dco-merge-group.yml

.github/workflows/e2e.yml (7)

• actions/checkout v4@34e114876b0b11c390a56381ad16ebd13914f8d5 → [Updates: v6]
• actions/download-artifact v4@d3f86a106a0bac45b974a628896c90dbdf5c8093 → [Updates: v8]
• actions/cache v4@0057852bfaa89a56745cba8c7296529d2fc39830 → [Updates: v5]
• helm/kind-action v1.14.0@ef37e7f390d99f746eb8b610417061a60e82a6cc
• kyverno/action-install-chainsaw v0.2.12@f2b47b97dc889c12702113753d713f01ec268de5 → [Updates: v0.2.15]
• actions/upload-artifact v4@ea165f8d65b6e75b540449e92b4886f43607fa02 → [Updates: v7]
• ubuntu 24.04

.github/workflows/golangci-lint.yml (4)

• actions/checkout v4@34e114876b0b11c390a56381ad16ebd13914f8d5 → [Updates: v6]
• actions/setup-go v5@40f1582b2485089dde7abd97c1529aa768e1baff → [Updates: v6]
• golangci/golangci-lint-action v7.0.1@9fae48acfc02a90574d7c304a1758ef9895495fa → [Updates: v9.2.1]
• ubuntu 24.04

.github/workflows/pr-checks.yml (13)

• actions/checkout v4@34e114876b0b11c390a56381ad16ebd13914f8d5 → [Updates: v6]
• actions/setup-go v5@40f1582b2485089dde7abd97c1529aa768e1baff → [Updates: v6]
• actions/cache v4@0057852bfaa89a56745cba8c7296529d2fc39830 → [Updates: v5]
• codecov/codecov-action v4@b9fd7d16f6d7d1b5d2bec1a2887e65ceed900238 → [Updates: v6]
• actions/checkout v4@34e114876b0b11c390a56381ad16ebd13914f8d5 → [Updates: v6]
• docker/setup-qemu-action v3@c7c53464625b32c7a7e944ae62b3e17d2b600130 → [Updates: v4]
• docker/setup-buildx-action v3@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f → [Updates: v4]
• docker/build-push-action v6@10e90e3645eae34f1e60eeb005ba3a3d33f178e8 → [Updates: v7]
• aquasecurity/trivy-action v0.35.0@57a97c7e7821a5776cebc9bb87c984fa69cba8f1 → [Updates: v0.36.0]
• github/codeql-action v2@b8d3b6e8af63cde30bdc382c0bc28114f4346c88 → [Updates: v4]
• actions/upload-artifact v4@ea165f8d65b6e75b540449e92b4886f43607fa02 → [Updates: v7]
• ubuntu 24.04
• ubuntu 24.04

.github/workflows/pr-lint.yml (4)

• amannn/action-semantic-pull-request v5@e32d7e603df1aa1ba07e981f2a23455dee596825 → [Updates: v6]
• marocchino/sticky-pull-request-comment v2@773744901bac0e8cbb5a0dc842800d45e9b2b405 → [Updates: v3.0.4]
• marocchino/sticky-pull-request-comment v2@773744901bac0e8cbb5a0dc842800d45e9b2b405 → [Updates: v3.0.4]
• ubuntu 24.04

.github/workflows/release-please.yml (17)

• googleapis/release-please-action v3@db8f2c60ee802b3748b512940dde88eabd7b7e01 → [Updates: v5]
• actions/checkout v4@34e114876b0b11c390a56381ad16ebd13914f8d5 → [Updates: v6]
• docker/setup-qemu-action master → [Updates: master]
• docker/setup-buildx-action master → [Updates: master]
• docker/build-push-action v6@10e90e3645eae34f1e60eeb005ba3a3d33f178e8 → [Updates: v7]
• sigstore/cosign-installer v4@cad07c2e89fa2edd6e2d7bab4c1aa38e53f76003
• actions/checkout v4@34e114876b0b11c390a56381ad16ebd13914f8d5 → [Updates: v6]
• actions/setup-go v5@40f1582b2485089dde7abd97c1529aa768e1baff → [Updates: v6]
• anchore/sbom-action v0@e22c389904149dbc22b58101806040fa8d37a610
• softprops/action-gh-release v1@de2c0eb89ae2a093876385947365aca7b0e5f844 → [Updates: v3]
• actions/checkout v4@34e114876b0b11c390a56381ad16ebd13914f8d5 → [Updates: v6]
• actions/setup-go v5@40f1582b2485089dde7abd97c1529aa768e1baff → [Updates: v6]
• ad-m/github-push-action master → [Updates: master]
• ubuntu 24.04
• ubuntu 24.04
• ubuntu 24.04
• ubuntu 24.04

.github/workflows/validate-crd-docs.yml (3)

• actions/checkout v4@34e114876b0b11c390a56381ad16ebd13914f8d5 → [Updates: v6]
• actions/cache v4@0057852bfaa89a56745cba8c7296529d2fc39830 → [Updates: v5]
• ubuntu 24.04

.github/workflows/validate-helm-docs.yml (4)

• actions/checkout v4@34e114876b0b11c390a56381ad16ebd13914f8d5 → [Updates: v6]
• actions/setup-node v4.4.0@49933ea5288caeca8642d1e84afbd3f7d6820020 → [Updates: v6.4.0]
• ubuntu 24.04
• node 22 → [Updates: 24]

gomod (2)

api/go.mod (6)

• go 1.25.0
• github.com/stretchr/testify v1.10.0 → [Updates: v1.11.1]
• k8s.io/api v0.32.3 → [Updates: v0.36.1]
• k8s.io/apimachinery v0.32.3 → [Updates: v0.36.1]
• sigs.k8s.io/controller-runtime v0.20.1 → [Updates: v0.24.1]
• sigs.k8s.io/gateway-api v1.2.1 → [Updates: v1.5.1]

go.mod (16)

• go 1.25.0
• github.com/go-logr/logr v1.4.3
• github.com/golang/mock v1.6.0
• github.com/kelseyhightower/envconfig v1.4.0
• github.com/open-feature/flagd-schemas v0.2.9-0.20250529171004-2852d7772e6b@2852d7772e6b
• github.com/open-feature/open-feature-operator/api v0.2.48 → [Updates: v0.2.49]
• github.com/stretchr/testify v1.11.1
• github.com/xeipuuv/gojsonschema v1.2.0
• go.uber.org/zap v1.27.0 → [Updates: v1.28.0]
• golang.org/x/exp v0.0.0-20250106191152-7588d65b2ba8@7588d65b2ba8 → [Updates: v0.0.0-20260603202125-055de637280b]
• k8s.io/api v0.32.3 → [Updates: v0.36.1]
• k8s.io/apimachinery v0.32.3 → [Updates: v0.36.1]
• k8s.io/client-go v0.32.3 → [Updates: v0.36.1]
• k8s.io/utils v0.0.0-20241210054802-24370beab758@24370beab758 → [Updates: v0.0.0-20260507154919-ff6756f316d2]
• sigs.k8s.io/controller-runtime v0.20.1 → [Updates: v0.24.1]
• sigs.k8s.io/gateway-api v1.2.1 → [Updates: v1.5.1]

helm-values (1)

chart/open-feature-operator/values.yaml (4)

• ghcr.io/open-feature/flagd v0.15.4 → [Updates: v0.16.0]
• ghcr.io/open-feature/flagd-proxy v0.9.4 → [Updates: v0.9.6]
• ghcr.io/open-feature/flagd v0.15.4 → [Updates: v0.16.0]
• ghcr.io/open-feature/open-feature-operator v0.9.2

kubernetes (12)

test/e2e/chainsaw/assets/manifests.yaml (2)

• curlimages/curl 8.11.1 → [Updates: 8.20.0]
• Deployment apps/v1

test/e2e/chainsaw/flagd-disabled/00-assert.yaml

test/e2e/chainsaw/flagd-disabled/00-install.yaml (2)

• curlimages/curl 8.11.1 → [Updates: 8.20.0]
• Deployment apps/v1

test/e2e/chainsaw/flagd-with-custom-ports/00-assert.yaml (2)

• ghcr.io/open-feature/flagd v0.15.4 → [Updates: v0.16.0]
• Deployment apps/v1

test/e2e/chainsaw/flagd-with-gateway-api/00-assert.yaml (2)

• ghcr.io/open-feature/flagd v0.15.4 → [Updates: v0.16.0]
• Deployment apps/v1

test/e2e/chainsaw/flagd-with-ingress-custom-paths/00-assert.yaml (3)

• ghcr.io/open-feature/flagd v0.15.4 → [Updates: v0.16.0]
• Deployment apps/v1
• Ingress networking.k8s.io/v1

test/e2e/chainsaw/flagd-with-ingress-default-paths/00-assert.yaml (3)

• ghcr.io/open-feature/flagd v0.15.4 → [Updates: v0.16.0]
• Deployment apps/v1
• Ingress networking.k8s.io/v1

test/e2e/chainsaw/fsconfig-file-sync/00-assert.yaml (1)

• ghcr.io/open-feature/flagd v0.15.4 → [Updates: v0.16.0]

test/e2e/chainsaw/fsconfig-flagd-proxy-sync/00-assert.yaml (1)

• ghcr.io/open-feature/flagd v0.15.4 → [Updates: v0.16.0]

test/e2e/chainsaw/fsconfig-k8s-sync/00-assert.yaml (1)

• ghcr.io/open-feature/flagd v0.15.4 → [Updates: v0.16.0]

test/e2e/chainsaw/in-process/00-assert.yaml (2)

• busybox 1.37.0 → [Updates: 1.38.0]
• busybox 1.37.0 → [Updates: 1.38.0]

test/e2e/chainsaw/in-process/00-install.yaml (3)

• busybox 1.37.0 → [Updates: 1.38.0]
• busybox 1.37.0 → [Updates: 1.38.0]
• Deployment apps/v1

kustomize (1)

config/manager/kustomization.yaml

regex (9)

.github/scripts/generate-helm-docs.sh (1)

• bitnami-labs/readme-generator-for-helm 2.7.0 → [Updates: 2.8.1, 3.0.1]

.github/workflows/golangci-lint.yml (1)

• golangci/golangci-lint v2.11.4 → [Updates: v2.12.2]

internal/common/types/envconfig.go (3)

• open-feature/flagd/flagd-proxy v0.9.4 → [Updates: v0.9.6]
• open-feature/flagd/flagd v0.15.4 → [Updates: v0.16.0]
• open-feature/flagd/flagd v0.15.4 → [Updates: v0.16.0]

internal/controller/core/featureflagsource/controller.go (1)

• open-feature/flagd/flagd-proxy v0.9.4 → [Updates: v0.9.6]

Makefile (2)

• kubernetes-sigs/kustomize v5.4.1
• kubernetes-sigs/controller-tools v0.16.5 → [Updates: v0.21.0]

test/e2e/chainsaw/flagd-with-custom-ports/00-assert.yaml (1)

• open-feature/flagd/flagd ghcr.io/open-feature/flagd:v0.15.4 → [Updates: v0.16.0]

test/e2e/chainsaw/flagd-with-gateway-api/00-assert.yaml (1)

• open-feature/flagd/flagd ghcr.io/open-feature/flagd:v0.15.4 → [Updates: v0.16.0]

test/e2e/chainsaw/flagd-with-ingress-custom-paths/00-assert.yaml (1)

• open-feature/flagd/flagd ghcr.io/open-feature/flagd:v0.15.4 → [Updates: v0.16.0]

test/e2e/chainsaw/flagd-with-ingress-default-paths/00-assert.yaml (1)

• open-feature/flagd/flagd ghcr.io/open-feature/flagd:v0.15.4 → [Updates: v0.16.0]

---

• Check this box to trigger a request for Renovate to run again on this repository