Dependency Dashboard

[red-hat-konflux]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Repository Problems

Renovate tried to run on this repository, but found these problems.

• ⚠️ WARN: Some release(s) did not have a releaseTimestamp, but as we're running with minimumReleaseAgeBehaviour=timestamp-optional, proceeding. See debug logs for more information
• ⚠️ WARN: Dependency name is unset, skipping
• ⚠️ WARN: Package lookup failures
• ⚠️ WARN: Some upgrade(s) did not have a releaseTimestamp, but as we're running with minimumReleaseAgeBehaviour=timestamp-optional, proceeding. See debug logs for more information

Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

• OCM-00000 | ci: Update openshift-ocm to v0.0.461

---

Warning

Renovate failed to look up the following dependencies: Failed to look up go package github.com/golang/glog: no-result.

Files affected: go.mod

---

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• OCM-00000 | ci: Update aws-sdk (github.com/aws/aws-sdk-go-v2/config, github.com/aws/aws-sdk-go-v2/credentials, github.com/aws/aws-sdk-go-v2/service/cloudformation, github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs, github.com/aws/aws-sdk-go-v2/service/ec2, github.com/aws/aws-sdk-go-v2/service/iam, github.com/aws/aws-sdk-go-v2/service/organizations, github.com/aws/aws-sdk-go-v2/service/route53, github.com/aws/aws-sdk-go-v2/service/s3, github.com/aws/aws-sdk-go-v2/service/secretsmanager, github.com/aws/aws-sdk-go-v2/service/servicequotas, github.com/aws/aws-sdk-go-v2/service/sts)
• OCM-00000 | ci: Update registry.access.redhat.com/ubi9/go-toolset Docker tag to v1.26.4-1782980183
• Click on this checkbox to rebase all open PRs at once

PR Closed (Blocked)

The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.

• OCM-00000 | ci: Update github.com/nathan-fiscaletti/consolesize-go digest to 3bac975
• OCM-00000 | ci: Update module github.com/alessio/shellescape to v1.6.0
• OCM-00000 | ci: Update helpers to v3
• OCM-00000 | ci: Update module github.com/dchest/validator to v1
• OCM-00000 | ci: Update module github.com/golang-jwt/jwt/v4 to v5
• OCM-00000 | ci: Update registry.access.redhat.com/ubi9/go-toolset Docker tag to v9

Detected Dependencies

dockerfile (4)

Dockerfile (1)

• registry.access.redhat.com/ubi9/go-toolset 1.25.8 → [Updates: 1.26.4-1782980183, 9.8-1782980183]

images/Dockerfile.e2e (3)

• registry.access.redhat.com/ubi9/go-toolset 1.25.8 → [Updates: 1.26.4-1782980183, 9.8-1782980183]
• registry.access.redhat.com/ubi9/go-toolset 1.25.8 → [Updates: 1.26.4-1782980183, 9.8-1782980183]
• registry.access.redhat.com/ubi9/go-toolset 1.25.8 → [Updates: 1.26.4-1782980183, 9.8-1782980183]

images/Dockerfile.konflux (1)

• registry.access.redhat.com/ubi9/go-toolset 1.25.8 → [Updates: 1.26.4-1782980183, 9.8-1782980183]

images/Dockerfile.release

gomod (7)

.bingo/bingo.mod (2)

• go 1.25.8
• github.com/bwplotka/bingo v0.10.0

.bingo/gci.mod (2)

• go 1.25.8
• github.com/daixiang0/gci v0.14.0

.bingo/go-bindata.mod (2)

• go 1.25.8
• github.com/go-bindata/go-bindata v3.1.2+incompatible

.bingo/golangci-lint.mod (2)

• go 1.25.8
• github.com/golangci/golangci-lint/v2 v2.12.2

.bingo/goreleaser.mod (1)

• go 1.25.8

.bingo/mockgen.mod (1)

• go 1.25.8

go.mod (50)

• go 1.25.8
• github.com/AlecAivazis/survey/v2 v2.3.7
• github.com/Masterminds/semver v1.5.0
• github.com/PuerkitoBio/goquery v1.12.0
• github.com/aws/aws-sdk-go-v2 v1.42.0 → [Updates: v1.42.1]
• github.com/aws/aws-sdk-go-v2/config v1.32.25 → [Updates: v1.32.26]
• github.com/aws/aws-sdk-go-v2/credentials v1.19.24 → [Updates: v1.19.25]
• github.com/aws/aws-sdk-go-v2/service/cloudformation v1.72.1 → [Updates: v1.73.0]
• github.com/aws/aws-sdk-go-v2/service/ec2 v1.308.0 → [Updates: v1.310.0]
• github.com/aws/aws-sdk-go-v2/service/iam v1.54.5 → [Updates: v1.54.6]
• github.com/aws/aws-sdk-go-v2/service/organizations v1.51.10 → [Updates: v1.51.11]
• github.com/aws/aws-sdk-go-v2/service/s3 v1.104.0 → [Updates: v1.104.1]
• github.com/aws/aws-sdk-go-v2/service/secretsmanager v1.42.3 → [Updates: v1.42.4]
• github.com/aws/aws-sdk-go-v2/service/servicequotas v1.35.7 → [Updates: v1.35.8]
• github.com/aws/aws-sdk-go-v2/service/sts v1.43.3 → [Updates: v1.43.4]
• github.com/aws/smithy-go v1.27.3
• github.com/briandowns/spinner v1.23.2
• github.com/dchest/validator v0.0.0-20191217151620-8e45250f2371@8e45250f2371 → [Updates: v1.0.0]
• github.com/dustin/go-humanize v1.0.1
• github.com/golang-jwt/jwt/v4 v4.5.2 → [Updates: v5.3.1]
• github.com/golang/glog v1.2.5
• github.com/google/go-cmp v0.7.0
• github.com/google/uuid v1.6.0
• github.com/hashicorp/go-version v1.9.0
• github.com/nathan-fiscaletti/consolesize-go v0.0.0-20210105204122-a87d9f614b9d@a87d9f614b9d → [Updates: v0.0.0-20260406063853-3bac975de715]
• github.com/onsi/ginkgo/v2 v2.32.0
• github.com/onsi/gomega v1.42.1
• github.com/openshift-online/ocm-api-model/clientapi v0.0.460 → [Updates: v0.0.461]
• github.com/openshift-online/ocm-common v0.0.44
• github.com/openshift-online/ocm-sdk-go v0.1.504
• github.com/pkg/errors v0.9.1
• github.com/robfig/cron/v3 v3.0.1
• github.com/sirupsen/logrus v1.9.4
• github.com/spf13/cobra v1.10.2
• github.com/spf13/pflag v1.0.10
• github.com/zgalor/weberr v0.9.0
• gitlab.com/c0b/go-ordered-json v0.0.0-20201030195603-febf46534d5a@febf46534d5a
• go.uber.org/mock v0.6.0
• gopkg.in/yaml.v3 v3.0.1
• k8s.io/apimachinery v0.35.6
• k8s.io/utils v0.0.0-20260626114624-be93311217bd@be93311217bd
• sigs.k8s.io/yaml v1.6.0
• github.com/alessio/shellescape v1.4.1 → [Updates: v1.6.0]
• github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs v1.78.0 → [Updates: v1.78.1]
• github.com/aws/aws-sdk-go-v2/service/route53 v1.63.3 → [Updates: v1.63.4]
• github.com/go-logr/logr v1.4.3
• golang.org/x/crypto v0.53.0
• golang.org/x/text v0.38.0
• gopkg.in/yaml.v2 v2.4.0 → [Updates: v3.0.1]
• github.com/kubermatic/glog-logrus v0.0.0-20180829085450-3fa5b9870d1d@3fa5b9870d1d

tekton (9)

.tekton/hcp-advanced-e2e-test.yaml

.tekton/rosa-cli-e2e-test-pull-request.yaml (19)

• quay.io/konflux-ci/tekton-catalog/task-init 0.4@sha256:5a423246792ac501ea279229b42ee57da9927da441c04b5c9ff86817b0856b08
• quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta 0.2@sha256:12cbcf0b408e906f84e7eb3c62c6cd618e2b1f78a40218e10940fbaf2c45455d
• quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta 0.3@sha256:92956e75cd4714286f9c0c043f5301d1c0df1d750884edeceee87e0a91cc1975
• quay.io/konflux-ci/tekton-catalog/task-buildah-oci-ta 0.10@sha256:62de839675c8da5040939d59a6f96bc52f86952a9fe7a06accb17921cef3a9d3
• quay.io/konflux-ci/tekton-catalog/task-build-image-index 0.3@sha256:70c52e88e737340e7b58418fda38c13273aa7cdf587b825778e3560aca1d1133
• quay.io/konflux-ci/tekton-catalog/task-source-build-oci-ta 0.3@sha256:7c5575ac8e292f27f57716c021ab0324460dc958e73946724c588c5228e5f372
• quay.io/konflux-ci/tekton-catalog/task-deprecated-image-check 0.5@sha256:e78d0d3baf3c8cfc1a5ad278196b74032d9568b143a87c7a79ab780fedfb296e
• quay.io/konflux-ci/tekton-catalog/task-clair-scan 0.3@sha256:9ff424d913dd7681031a93d8bdbed622cd5536633f8ed0dbb4a9021055cf9d21
• quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks 0.2@sha256:3c4f60ebda2225eff6a6bc387d9bbd443f1264d756bf385f97cc684992e904a0
• quay.io/konflux-ci/tekton-catalog/task-sast-snyk-check-oci-ta 0.5@sha256:fda2e510511f5588de3882612f53eb06ea833889bc47da3d60ef7273555067bc
• quay.io/konflux-ci/tekton-catalog/task-clamav-scan 0.3@sha256:53a02326bfb930ca5ef6bfa7a33acca833d57752f34f3cb79255fe2e25e7d217
• quay.io/konflux-ci/tekton-catalog/task-sast-coverity-check-oci-ta 0.3@sha256:e92d00ed858233d0096627861192d3e4fc013cf1559c0d0b0ea0657d3377ce75
• quay.io/konflux-ci/tekton-catalog/task-coverity-availability-check 0.2@sha256:8b501440a960aec446db2ebc6625a49d0317a9fc7bf0f7bd9b18cb63052db7de
• quay.io/konflux-ci/tekton-catalog/task-sast-shell-check-oci-ta 0.1@sha256:fc685d6f7dfb7c9ab2f2db38bbe2c8d383407847350ccd8b96352322c487b13c
• quay.io/konflux-ci/tekton-catalog/task-sast-unicode-check-oci-ta 0.4@sha256:5807ffe3a0cca5cf970076bbc7a404642cc6e3eebe64e9e5e6a4f20da740bf73
• quay.io/konflux-ci/tekton-catalog/task-apply-tags 0.3@sha256:3ab844157eccd68e95e4852adc06c3c4ea674edb7865a474b0a898227f2893d6
• quay.io/konflux-ci/tekton-catalog/task-push-dockerfile-oci-ta 0.3@sha256:f3e97e6eaf09d6585e915c3e7b82d110d97e34202bf591a2d990127ba5bb362d
• quay.io/konflux-ci/tekton-catalog/task-rpms-signature-scan 0.2@sha256:65370ccb44ff82e4ce128addd913f3c96b298607b3760ee1339ed10011a4bd6b
• quay.io/konflux-ci/tekton-catalog/task-show-sbom 0.1@sha256:8fe70a95c28b1ac92abd67a7477ad960218f3f570a9f8a12ad082dff7e9c9579

.tekton/rosa-cli-e2e-test-push.yaml (19)

• quay.io/konflux-ci/tekton-catalog/task-init 0.4@sha256:5a423246792ac501ea279229b42ee57da9927da441c04b5c9ff86817b0856b08
• quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta 0.2@sha256:12cbcf0b408e906f84e7eb3c62c6cd618e2b1f78a40218e10940fbaf2c45455d
• quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta 0.3@sha256:92956e75cd4714286f9c0c043f5301d1c0df1d750884edeceee87e0a91cc1975
• quay.io/konflux-ci/tekton-catalog/task-buildah-oci-ta 0.10@sha256:62de839675c8da5040939d59a6f96bc52f86952a9fe7a06accb17921cef3a9d3
• quay.io/konflux-ci/tekton-catalog/task-build-image-index 0.3@sha256:70c52e88e737340e7b58418fda38c13273aa7cdf587b825778e3560aca1d1133
• quay.io/konflux-ci/tekton-catalog/task-source-build-oci-ta 0.3@sha256:7c5575ac8e292f27f57716c021ab0324460dc958e73946724c588c5228e5f372
• quay.io/konflux-ci/tekton-catalog/task-deprecated-image-check 0.5@sha256:e78d0d3baf3c8cfc1a5ad278196b74032d9568b143a87c7a79ab780fedfb296e
• quay.io/konflux-ci/tekton-catalog/task-clair-scan 0.3@sha256:9ff424d913dd7681031a93d8bdbed622cd5536633f8ed0dbb4a9021055cf9d21
• quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks 0.2@sha256:3c4f60ebda2225eff6a6bc387d9bbd443f1264d756bf385f97cc684992e904a0
• quay.io/konflux-ci/tekton-catalog/task-sast-snyk-check-oci-ta 0.5@sha256:fda2e510511f5588de3882612f53eb06ea833889bc47da3d60ef7273555067bc
• quay.io/konflux-ci/tekton-catalog/task-clamav-scan 0.3@sha256:53a02326bfb930ca5ef6bfa7a33acca833d57752f34f3cb79255fe2e25e7d217
• quay.io/konflux-ci/tekton-catalog/task-sast-coverity-check-oci-ta 0.3@sha256:e92d00ed858233d0096627861192d3e4fc013cf1559c0d0b0ea0657d3377ce75
• quay.io/konflux-ci/tekton-catalog/task-coverity-availability-check 0.2@sha256:8b501440a960aec446db2ebc6625a49d0317a9fc7bf0f7bd9b18cb63052db7de
• quay.io/konflux-ci/tekton-catalog/task-sast-shell-check-oci-ta 0.1@sha256:fc685d6f7dfb7c9ab2f2db38bbe2c8d383407847350ccd8b96352322c487b13c
• quay.io/konflux-ci/tekton-catalog/task-sast-unicode-check-oci-ta 0.4@sha256:5807ffe3a0cca5cf970076bbc7a404642cc6e3eebe64e9e5e6a4f20da740bf73
• quay.io/konflux-ci/tekton-catalog/task-apply-tags 0.3@sha256:3ab844157eccd68e95e4852adc06c3c4ea674edb7865a474b0a898227f2893d6
• quay.io/konflux-ci/tekton-catalog/task-push-dockerfile-oci-ta 0.3@sha256:f3e97e6eaf09d6585e915c3e7b82d110d97e34202bf591a2d990127ba5bb362d
• quay.io/konflux-ci/tekton-catalog/task-rpms-signature-scan 0.2@sha256:65370ccb44ff82e4ce128addd913f3c96b298607b3760ee1339ed10011a4bd6b
• quay.io/konflux-ci/tekton-catalog/task-show-sbom 0.1@sha256:8fe70a95c28b1ac92abd67a7477ad960218f3f570a9f8a12ad082dff7e9c9579

.tekton/rosa-pull-request.yaml (19)

• quay.io/konflux-ci/tekton-catalog/task-init 0.4@sha256:5a423246792ac501ea279229b42ee57da9927da441c04b5c9ff86817b0856b08
• quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta 0.2@sha256:12cbcf0b408e906f84e7eb3c62c6cd618e2b1f78a40218e10940fbaf2c45455d
• quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta 0.3@sha256:92956e75cd4714286f9c0c043f5301d1c0df1d750884edeceee87e0a91cc1975
• quay.io/konflux-ci/tekton-catalog/task-buildah-oci-ta 0.10@sha256:62de839675c8da5040939d59a6f96bc52f86952a9fe7a06accb17921cef3a9d3
• quay.io/konflux-ci/tekton-catalog/task-build-image-index 0.3@sha256:70c52e88e737340e7b58418fda38c13273aa7cdf587b825778e3560aca1d1133
• quay.io/konflux-ci/tekton-catalog/task-source-build-oci-ta 0.3@sha256:7c5575ac8e292f27f57716c021ab0324460dc958e73946724c588c5228e5f372
• quay.io/konflux-ci/tekton-catalog/task-deprecated-image-check 0.5@sha256:e78d0d3baf3c8cfc1a5ad278196b74032d9568b143a87c7a79ab780fedfb296e
• quay.io/konflux-ci/tekton-catalog/task-clair-scan 0.3@sha256:9ff424d913dd7681031a93d8bdbed622cd5536633f8ed0dbb4a9021055cf9d21
• quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks 0.2@sha256:3c4f60ebda2225eff6a6bc387d9bbd443f1264d756bf385f97cc684992e904a0
• quay.io/konflux-ci/tekton-catalog/task-sast-snyk-check-oci-ta 0.5@sha256:fda2e510511f5588de3882612f53eb06ea833889bc47da3d60ef7273555067bc
• quay.io/konflux-ci/tekton-catalog/task-clamav-scan 0.3@sha256:53a02326bfb930ca5ef6bfa7a33acca833d57752f34f3cb79255fe2e25e7d217
• quay.io/konflux-ci/tekton-catalog/task-sast-coverity-check-oci-ta 0.3@sha256:e92d00ed858233d0096627861192d3e4fc013cf1559c0d0b0ea0657d3377ce75
• quay.io/konflux-ci/tekton-catalog/task-coverity-availability-check 0.2@sha256:8b501440a960aec446db2ebc6625a49d0317a9fc7bf0f7bd9b18cb63052db7de
• quay.io/konflux-ci/tekton-catalog/task-sast-shell-check-oci-ta 0.1@sha256:fc685d6f7dfb7c9ab2f2db38bbe2c8d383407847350ccd8b96352322c487b13c
• quay.io/konflux-ci/tekton-catalog/task-sast-unicode-check-oci-ta 0.4@sha256:5807ffe3a0cca5cf970076bbc7a404642cc6e3eebe64e9e5e6a4f20da740bf73
• quay.io/konflux-ci/tekton-catalog/task-apply-tags 0.3@sha256:3ab844157eccd68e95e4852adc06c3c4ea674edb7865a474b0a898227f2893d6
• quay.io/konflux-ci/tekton-catalog/task-push-dockerfile-oci-ta 0.3@sha256:f3e97e6eaf09d6585e915c3e7b82d110d97e34202bf591a2d990127ba5bb362d
• quay.io/konflux-ci/tekton-catalog/task-rpms-signature-scan 0.2@sha256:65370ccb44ff82e4ce128addd913f3c96b298607b3760ee1339ed10011a4bd6b
• quay.io/konflux-ci/tekton-catalog/task-show-sbom 0.1@sha256:8fe70a95c28b1ac92abd67a7477ad960218f3f570a9f8a12ad082dff7e9c9579

.tekton/rosa-push.yaml (19)

• quay.io/konflux-ci/tekton-catalog/task-init 0.4@sha256:5a423246792ac501ea279229b42ee57da9927da441c04b5c9ff86817b0856b08
• quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta 0.2@sha256:12cbcf0b408e906f84e7eb3c62c6cd618e2b1f78a40218e10940fbaf2c45455d
• quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta 0.3@sha256:92956e75cd4714286f9c0c043f5301d1c0df1d750884edeceee87e0a91cc1975
• quay.io/konflux-ci/tekton-catalog/task-buildah-oci-ta 0.10@sha256:62de839675c8da5040939d59a6f96bc52f86952a9fe7a06accb17921cef3a9d3
• quay.io/konflux-ci/tekton-catalog/task-build-image-index 0.3@sha256:70c52e88e737340e7b58418fda38c13273aa7cdf587b825778e3560aca1d1133
• quay.io/konflux-ci/tekton-catalog/task-source-build-oci-ta 0.3@sha256:7c5575ac8e292f27f57716c021ab0324460dc958e73946724c588c5228e5f372
• quay.io/konflux-ci/tekton-catalog/task-deprecated-image-check 0.5@sha256:e78d0d3baf3c8cfc1a5ad278196b74032d9568b143a87c7a79ab780fedfb296e
• quay.io/konflux-ci/tekton-catalog/task-clair-scan 0.3@sha256:9ff424d913dd7681031a93d8bdbed622cd5536633f8ed0dbb4a9021055cf9d21
• quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks 0.2@sha256:3c4f60ebda2225eff6a6bc387d9bbd443f1264d756bf385f97cc684992e904a0
• quay.io/konflux-ci/tekton-catalog/task-sast-snyk-check-oci-ta 0.5@sha256:fda2e510511f5588de3882612f53eb06ea833889bc47da3d60ef7273555067bc
• quay.io/konflux-ci/tekton-catalog/task-clamav-scan 0.3@sha256:53a02326bfb930ca5ef6bfa7a33acca833d57752f34f3cb79255fe2e25e7d217
• quay.io/konflux-ci/tekton-catalog/task-sast-coverity-check-oci-ta 0.3@sha256:e92d00ed858233d0096627861192d3e4fc013cf1559c0d0b0ea0657d3377ce75
• quay.io/konflux-ci/tekton-catalog/task-coverity-availability-check 0.2@sha256:8b501440a960aec446db2ebc6625a49d0317a9fc7bf0f7bd9b18cb63052db7de
• quay.io/konflux-ci/tekton-catalog/task-sast-shell-check-oci-ta 0.1@sha256:fc685d6f7dfb7c9ab2f2db38bbe2c8d383407847350ccd8b96352322c487b13c
• quay.io/konflux-ci/tekton-catalog/task-sast-unicode-check-oci-ta 0.4@sha256:5807ffe3a0cca5cf970076bbc7a404642cc6e3eebe64e9e5e6a4f20da740bf73
• quay.io/konflux-ci/tekton-catalog/task-apply-tags 0.3@sha256:3ab844157eccd68e95e4852adc06c3c4ea674edb7865a474b0a898227f2893d6
• quay.io/konflux-ci/tekton-catalog/task-push-dockerfile-oci-ta 0.3@sha256:f3e97e6eaf09d6585e915c3e7b82d110d97e34202bf591a2d990127ba5bb362d
• quay.io/konflux-ci/tekton-catalog/task-rpms-signature-scan 0.2@sha256:65370ccb44ff82e4ce128addd913f3c96b298607b3760ee1339ed10011a4bd6b
• quay.io/konflux-ci/tekton-catalog/task-show-sbom 0.1@sha256:8fe70a95c28b1ac92abd67a7477ad960218f3f570a9f8a12ad082dff7e9c9579

.tekton/steps/clean-up-step.yaml

.tekton/steps/export-resources-record-step.yaml

.tekton/steps/run-e2e-day1-step.yaml

.tekton/steps/run-e2e-day2-step.yaml