Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• chore(deps): update docker/setup-qemu-action action to v4.3.0
• chore(deps): update module controller-gen to v0.22.0
• fix(deps): update module github.com/onsi/gomega to v1.43.0
• 🔐 Create all rate-limited PRs at once 🔐

Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

• chore(deps): update gcr.io/distroless/static:nonroot docker digest to 1c2c046
• fix(deps): update module sigs.k8s.io/controller-runtime to v0.25.0

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): pin dependencies (ghcr.io/opendefensecloud/dependency-controller, ghcr.io/opendefensecloud/dependency-webhook)
• chore(deps): update anchore/sbom-action action to v0.24.2
• chore(deps): update dependency opendefensecloud/dev-kit to v1.0.15
• chore(deps): update github/codeql-action action to v4.37.9
• fix(deps): update module github.com/stretchr/testify to v1.12.1
• chore(deps): update docker/setup-buildx-action action to v4.3.0
• chore(deps): update golang version sync to v1.27.1 (go, golang)
• chore(deps): update golangci-lint to v2.13.2 (golangci-lint, golangci/golangci-lint)
• fix(deps): update kubernetes monorepo to v0.37.0 (k8s.io/api, k8s.io/apiextensions-apiserver, k8s.io/apimachinery, k8s.io/client-go)
• chore(deps): update dependency opendefensecloud/dev-kit to v2
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

dockerfile (1)

Dockerfile (4)

• golang 1.26.6@sha256:0d1d3a794be25f809dd2cb3160d8c73276c4056a9f8242a138e908ddeee7b6b6 → [Updates: 1.27.1]
• gcr.io/distroless/static nonroot@sha256:d29e660cc75a5b6b1334e03c5c81ccf9bc0884a002c6000dbf0fb96034814478 → [Updates: nonroot]
• gcr.io/distroless/static nonroot@sha256:d29e660cc75a5b6b1334e03c5c81ccf9bc0884a002c6000dbf0fb96034814478 → [Updates: nonroot]
• gcr.io/distroless/static nonroot@sha256:d29e660cc75a5b6b1334e03c5c81ccf9bc0884a002c6000dbf0fb96034814478 → [Updates: nonroot]

github-actions (7)

.github/workflows/docker.yaml (10)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• docker/metadata-action v6.2.0@dc802804100637a589fabce1cb79ff13a1411302
• docker/setup-qemu-action v4.2.0@96fe6ef7f33517b61c61be40b68a1882f3264fb8 → [Updates: v4.3.0]
• docker/setup-buildx-action v4.2.0@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c → [Updates: v4.3.0]
• docker/login-action v4.6.0@dbcb813823bdd20940b903addbd779551569679f
• docker/build-push-action v7.3.0@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a
• sigstore/cosign-installer v4.1.2@6f9f17788090df1f26f669e9d70d6ae9567deba6
• anchore/sbom-action v0.24.0@e22c389904149dbc22b58101806040fa8d37a610 → [Updates: v0.24.2]
• actions/attest v4.2.2@1e69f48acb82d1966a394da916b4c1698aa569d6
• actions/attest v4.2.2@1e69f48acb82d1966a394da916b4c1698aa569d6

.github/workflows/fuzz.yaml (3)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/setup-go v7.0.0@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a

.github/workflows/golang.yaml (6)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/setup-go v7.0.0@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e
• golangci/golangci-lint-action v9.3.0@ba0d7d2ec06a0ea1cb5fa41b2e4a3ab91d21278a
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/setup-go v7.0.0@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e
• golangci/golangci-lint v2.12.2 → [Updates: v2.13.2]

.github/workflows/helm-lint.yaml (1)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1

.github/workflows/helm-publish.yaml (4)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/setup-go v7.0.0@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e
• sigstore/cosign-installer v4.1.2@6f9f17788090df1f26f669e9d70d6ae9567deba6
• docker/login-action v4.6.0@dbcb813823bdd20940b903addbd779551569679f

.github/workflows/ossf-scorecard.yml (4)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• ossf/scorecard-action v2.4.4@2d1146689b8cda280b9bc96326124645441f03bc
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• github/codeql-action v4.37.7@ff2f1c621b7f889edc0d3c761ac2e6a3f8cdb0dd → [Updates: v4.37.9]

.github/workflows/osv-scanner.yml (2)

• google/osv-scanner-action v2.5.1@6e4298ebc4db23e847df9b2e2de2939d6f066c67
• google/osv-scanner-action v2.5.1@6e4298ebc4db23e847df9b2e2de2939d6f066c67

gomod (1)

go.mod (15)

• go 1.26.6 → [Updates: 1.27.1]
• github.com/kcp-dev/logicalcluster/v3 v3.0.5
• github.com/kcp-dev/multicluster-provider v0.8.0
• github.com/kcp-dev/multicluster-provider/client v0.8.0
• github.com/kcp-dev/sdk v0.32.3
• github.com/onsi/ginkgo/v2 v2.32.1
• github.com/onsi/gomega v1.42.1 → [Updates: v1.43.0]
• github.com/stretchr/testify v1.12.0 → [Updates: v1.12.1]
• k8s.io/api v0.36.3 → [Updates: v0.37.0]
• k8s.io/apiextensions-apiserver v0.36.3 → [Updates: v0.37.0]
• k8s.io/apimachinery v0.36.3 → [Updates: v0.37.0]
• k8s.io/client-go v0.36.3 → [Updates: v0.37.0]
• sigs.k8s.io/controller-runtime v0.24.1 → [Updates: v0.25.0]
• sigs.k8s.io/multicluster-runtime v0.24.1
• sigs.k8s.io/yaml v1.6.0

helm-values (1)

charts/dependency-controller/values.yaml (2)

• ghcr.io/opendefensecloud/dependency-controller unknown version → [Updates: ``]
• ghcr.io/opendefensecloud/dependency-webhook unknown version → [Updates: ``]

nix (1)

flake.nix (4)

• dev-kit lock file @ 41370fd52f6889401ef79388e54e7e38bfbf112e
• flake-utils lock file @ 11707dc2f618dd54ca8739b309ec4fc024de578b
• go-overlay lock file @ 1c161331a7d94d356846870530adf4447715d2fc
• nixpkgs nixos-unstable

regex (4)

.github/workflows/golang.yaml (1)

• golangci/golangci-lint v2.12.2 → [Updates: v2.13.2]

flake.nix (1)

• go 1.26.6 → [Updates: 1.27.1]

Makefile (1)

• opendefensecloud/dev-kit v1.0.14 → [Updates: v1.0.15, v2.2.0]

tools.lock (6)

• addlicense v1.2.0
• apigen v0.32.3
• controller-gen v0.21.0 → [Updates: v0.22.0]
• ginkgo v2.32.1
• golangci-lint v2.12.2 → [Updates: v2.13.2]
• osv-scanner v2.5.1

---

• Check this box to trigger a request for Renovate to run again on this repository