Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Abandoned Dependencies

The following dependencies have not received updates for an extended period and may be unmaintained.

View abandoned dependencies (5)

[!NOTE]
Packages are marked as abandoned when they exceed the abandonmentThreshold since their last release. Unlike deprecated packages with official notices, abandonment is detected by release inactivity.

Datasource	Package	Last Updated
github-actions	deepsourcelabs/test-coverage-action	2025-07-17
github-actions	pre-commit/action	2024-02-07
gomod	github.com/google/go-cmp	2025-01-14
gomod	sigs.k8s.io/yaml	2025-07-24

Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

• chore(deps): update gcr.io/distroless/static-debian12 docker digest to a9fcaed

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): update golang (github.com/prometheus/client_golang, k8s.io/api, k8s.io/apiextensions-apiserver, k8s.io/apimachinery, k8s.io/client-go)
• chore(deps): update github-actions (DavidAnson/markdownlint-cli2-action, actions/checkout, actions/setup-go, actions/setup-python, docker/login-action, renovatebot/github-action, reviewdog/action-actionlint, sigstore/cosign)
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

dockerfile (2)

Dockerfile (2)

• docker/dockerfile 1@sha256:87999aa3d42bdc6bea60565083ee17e86d1f3339802f543c0d03998580f9cb89
• gcr.io/distroless/static-debian12 sha256:61b7ccecebc7c474a531717de80a94709d20547cdcdaf740c25876f2a8e38b44 → [Updates: undefined]

Dockerfile.scratch (1)

• docker/dockerfile 1@sha256:87999aa3d42bdc6bea60565083ee17e86d1f3339802f543c0d03998580f9cb89

github-actions (9)

.github/workflows/build-publish.yml (16)

• actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 → [Updates: v7.0.1]
• docker/setup-qemu-action v4.2.0@96fe6ef7f33517b61c61be40b68a1882f3264fb8
• docker/setup-buildx-action v4.2.0@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c
• docker/login-action v4.4.0@af1e73f918a031802d376d3c8bbc3fe56130a9b0 → [Updates: v4.6.0]
• docker/login-action v4.4.0@af1e73f918a031802d376d3c8bbc3fe56130a9b0 → [Updates: v4.6.0]
• actions/setup-go v6.5.0@924ae3a1cded613372ab5595356fb5720e22ba16 → [Updates: v7.0.0]
• sigstore/cosign-installer v4.1.2@6f9f17788090df1f26f669e9d70d6ae9567deba6
• aquasecurity/setup-trivy v0.3.1@81e514348e19b6112ce2a7e3ecbafe19c1e1f567
• actions/attest-build-provenance v4.1.1@0f67c3f4856b2e3261c31976d6725780e5e4c373
• actions/attest-build-provenance v4.1.1@0f67c3f4856b2e3261c31976d6725780e5e4c373
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• softprops/action-gh-release v3@3d0d9888cb7fd7b750713d6e236d1fcb99157228
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• ubuntu 24.04
• sigstore/cosign v3.0.6 → [Updates: v3.1.2]
• aquasecurity/trivy v0.72.0

.github/workflows/ci.yml (26)

• actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 → [Updates: v7.0.1]
• actions/setup-go v6.5.0@924ae3a1cded613372ab5595356fb5720e22ba16 → [Updates: v7.0.0]
• pre-commit/action v3.0.1@2c7b3805fd2a0fd8c1884dcaebf91fc102a13ecd
• golangci/golangci-lint-action v9.3.0@ba0d7d2ec06a0ea1cb5fa41b2e4a3ab91d21278a
• DavidAnson/markdownlint-cli2-action v24.0.0@8de2aa07cae85fd17c0b35642db70cf5495f1d25 → [Updates: v24.1.0]
• actions/setup-python v6.3.0@ece7cb06caefa5fff74198d8649806c4678c61a1 → [Updates: v7.0.0]
• hadolint/hadolint-action v3.3.0@2332a7b74a6de0dda2e2221d575162eba76ba5e5 → [Updates: v3.4.0]
• reviewdog/action-actionlint v1.72@6fb7acc99f4a1008869fa8a0f09cfca740837d9d → [Updates: v1.73, v1.72]
• actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 → [Updates: v7.0.1]
• actions/setup-go v6.5.0@924ae3a1cded613372ab5595356fb5720e22ba16 → [Updates: v7.0.0]
• actions/cache v6.1.0@55cc8345863c7cc4c66a329aec7e433d2d1c52a9
• deepsourcelabs/test-coverage-action v1.1.3@4284bb73a04adb39faaa6bfcc2d0e3dd137ffed7
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 → [Updates: v7.0.1]
• actions/setup-go v6.5.0@924ae3a1cded613372ab5595356fb5720e22ba16 → [Updates: v7.0.0]
• actions/cache v6.1.0@55cc8345863c7cc4c66a329aec7e433d2d1c52a9
• aquasecurity/trivy-action v0.36.0@ed142fd0673e97e23eac54620cfb913e5ce36c25
• aquasecurity/trivy-action v0.36.0@ed142fd0673e97e23eac54620cfb913e5ce36c25
• docker/setup-buildx-action v4.2.0@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c
• docker/build-push-action v7.3.0@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a
• aquasecurity/trivy-action v0.36.0@ed142fd0673e97e23eac54620cfb913e5ce36c25
• ubuntu 24.04
• golangci/golangci-lint v2.12.2
• python 3.14
• ubuntu 24.04
• ubuntu 24.04

.github/workflows/commitlint.yml (3)

• actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 → [Updates: v7.0.1]
• wagoid/commitlint-github-action v6@b948419dd99f3fd78a6548d48f94e3df7f6bf3ed
• ubuntu 24.04

.github/workflows/continuous-security.yml (12)

• actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 → [Updates: v7.0.1]
• actions/setup-go v6.5.0@924ae3a1cded613372ab5595356fb5720e22ba16 → [Updates: v7.0.0]
• actions/cache v6.1.0@55cc8345863c7cc4c66a329aec7e433d2d1c52a9
• golang/govulncheck-action v1.1.0@032d45514ae346b1db93c04b0c90b841c370344f
• aquasecurity/trivy-action v0.36.0@ed142fd0673e97e23eac54620cfb913e5ce36c25
• aquasecurity/trivy-action v0.36.0@ed142fd0673e97e23eac54620cfb913e5ce36c25
• docker/setup-buildx-action v4.2.0@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c
• docker/build-push-action v7.3.0@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a
• aquasecurity/trivy-action v0.36.0@ed142fd0673e97e23eac54620cfb913e5ce36c25
• anchore/sbom-action v0.24.0@e22c389904149dbc22b58101806040fa8d37a610
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• ubuntu 24.04

.github/workflows/deepsource-coverage.yml (4)

• actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 → [Updates: v7.0.1]
• actions/setup-go v6.5.0@924ae3a1cded613372ab5595356fb5720e22ba16 → [Updates: v7.0.0]
• deepsourcelabs/test-coverage-action v1.1.3@4284bb73a04adb39faaa6bfcc2d0e3dd137ffed7
• ubuntu 24.04

.github/workflows/deprecation-check.yml (2)

• actions/checkout v7@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 → [Updates: v7]
• ubuntu 24.04

.github/workflows/labels-sync.yml (1)

• ubuntu 24.04

.github/workflows/release.yml (2)

• actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 → [Updates: v7.0.1]
• ubuntu 24.04

.github/workflows/renovate-validate.yml (3)

• actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 → [Updates: v7.0.1]
• renovatebot/github-action v46.1.19@22e0a16091fc706b04affe6ae53d5e3358ac4023 → [Updates: v46.2.0]
• ubuntu 24.04

gomod (1)

go.mod (18)

• go 1.26.2
• github.com/google/go-cmp v0.7.0
• github.com/prometheus/client_golang v1.23.2 → [Updates: v1.24.1]
• github.com/sirupsen/logrus v1.9.4
• github.com/stretchr/testify v1.11.1
• go.opentelemetry.io/contrib/instrumentation/runtime v0.69.0
• go.opentelemetry.io/otel v1.44.0
• go.opentelemetry.io/otel/exporters/prometheus v0.66.0
• go.opentelemetry.io/otel/metric v1.44.0
• go.opentelemetry.io/otel/sdk v1.44.0
• go.opentelemetry.io/otel/sdk/metric v1.44.0
• golang.org/x/sync v0.22.0
• k8s.io/api v0.36.2 → [Updates: v0.36.3]
• k8s.io/apiextensions-apiserver v0.36.2 → [Updates: v0.36.3]
• k8s.io/apimachinery v0.36.2 → [Updates: v0.36.3]
• k8s.io/client-go v0.36.2 → [Updates: v0.36.3]
• sigs.k8s.io/controller-runtime v0.24.1
• sigs.k8s.io/yaml v1.6.0

regex (2)

Dockerfile (1)

• golang 1.26.5-alpine@sha256:0178a641fbb4858c5f1b48e34bdaabe0350a330a1b1149aabd498d0699ff5fb2

Dockerfile.scratch (1)

• golang 1.26.5-alpine@sha256:0178a641fbb4858c5f1b48e34bdaabe0350a330a1b1149aabd498d0699ff5fb2

---

• Check this box to trigger a request for Renovate to run again on this repository