Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Abandoned Dependencies

The following dependencies have not received updates for an extended period and may be unmaintained.

Note

Packages are marked as abandoned when they exceed the abandonmentThreshold since their last release. Unlike deprecated packages with official notices, abandonment is detected by release inactivity.

View abandoned dependencies (6)

Datasource	Package	Last Updated
gomod	github.com/opencontainers/go-digest	2020-05-14
gomod	github.com/opencontainers/image-spec	2025-03-03
gomod	gopkg.in/yaml.v3	2022-05-27
gomod	gotest.tools/v3	2025-02-08
regex	github.com/princjef/gomarkdoc	2023-06-17
regex	gotestyourself/gotestsum	2025-09-11

PR Edited (Blocked)

The following updates have been manually edited so Renovate will no longer make changes. To discard all commits and start over, click on a checkbox below.

• chore(deps): update module github.com/sigstore/cosign/v2 to v3

Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

• chore(deps): update dependency hashicorp/vault to v2.1.1
• chore(deps): update tools (github.com/anchore/syft, github.com/cli/cli/v2, github.com/goreleaser/goreleaser/v2, protocolbuffers/protobuf)

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): update renovate/renovate docker tag to v44.90.2

Detected Dependencies

github-actions (6)

.github/workflows/base-images-upgrade.yaml (3)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/setup-go v7.0.0@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e
• actions/github-script v9.0.0@3a2844b7e9c422d3c10d287c895573f7108da1b3

.github/workflows/e2e-test.yaml (2)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/setup-go v7.0.0@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e

.github/workflows/govulncheck.yaml (2)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/setup-go v7.0.0@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e

.github/workflows/kind-images-upgrade.yaml (3)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/setup-go v7.0.0@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e
• actions/github-script v9.0.0@3a2844b7e9c422d3c10d287c895573f7108da1b3

.github/workflows/validate-renovate-config.yaml (2)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• renovate/renovate 44.82.3@sha256:d8fa5cceb1c68315c235559c981b5486db0165fd25e186a0cb6125f81578be87 → [Updates: 44.90.2]

modules/go/base/.github/workflows/govulncheck.yaml (2)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/setup-go v7.0.0@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e

gomod (2)

modules/olm-bundle/olm-to-oci/go.mod (12)

• go 1.25.7
• github.com/google/go-containerregistry v0.22.1
• gopkg.in/yaml.v3 v3.0.1
• github.com/docker/cli v29.7.2+incompatible → [Updates: v29.8.0+incompatible]
• github.com/docker/docker-credential-helpers v0.9.3 → [Updates: v0.9.9]
• github.com/klauspost/compress v1.19.2 → [Updates: v1.20.0]
• github.com/opencontainers/go-digest v1.0.0
• github.com/opencontainers/image-spec v1.1.1
• github.com/sirupsen/logrus v1.9.4 → [Updates: v1.10.2]
• golang.org/x/sync v0.22.0 → [Updates: v0.23.0]
• golang.org/x/sys v0.47.0 → [Updates: v0.48.0]
• gotest.tools/v3 v3.5.2

tests/e2e-projects/test-project/go.mod (1)

• go 1.24.0

regex (3)

modules/cert-manager/00_mod.mk (1)

• cert-manager/cert-manager v1.21.2

modules/tools/00_mod.mk (45)

• helm/helm v4.3.0
• helm-unittest/helm-unittest v1.1.2
• kubernetes/kubernetes v1.37.0
• kubernetes-sigs/kind v0.33.0
• hashicorp/vault v2.1.0 → [Updates: v2.1.1]
• Azure/azure-workload-identity v1.6.3
• kyverno/kyverno v1.19.1
• mikefarah/yq v4.53.6
• ko-build/ko 0.19.1
• protocolbuffers/protobuf v36.1 → [Updates: v36.2]
• aquasecurity/trivy v0.74.0
• vmware-tanzu/carvel-ytt v0.55.2
• rclone/rclone v1.75.1
• istio/istio 1.31.0
• sigs.k8s.io/controller-tools v0.22.0
• golang.org/x/tools v0.50.0
• gotestyourself/gotestsum v1.13.0
• sigs.k8s.io/kustomize/kustomize/v5 v5.8.1
• github.com/itchyny/gojq v0.12.19
• github.com/google/go-containerregistry v0.22.1
• google.golang.org/protobuf v1.36.12
• github.com/sigstore/cosign/v2 v2.6.5 → [Updates: v3.1.3]
• github.com/cert-manager/boilersuite v0.2.0
• github.com/princjef/gomarkdoc v1.1.0
• oras.land/oras v1.3.4
• github.com/cert-manager/klone v0.3.0
• github.com/goreleaser/goreleaser/v2 v2.18.1 → [Updates: v2.18.2]
• github.com/anchore/syft v1.51.1 → [Updates: v1.52.0]
• cert-manager/helm-tool v0.6.0
• cert-manager/image-tool v0.2.0
• cert-manager/cmctl v2.5.0
• github.com/cert-manager/release v1.13.0
• golang.org/x/vuln v1.8.0
• operator-framework/operator-sdk v1.42.3
• github.com/cli/cli/v2 v2.100.0 → [Updates: v2.101.0]
• redhat-openshift-ecosystem/openshift-preflight 1.21.0
• daixiang0/gci v0.14.0
• google/yamlfmt v0.21.0
• yannh/kubeconform v0.8.0
• suzuki-shunsuke/pinact v5.0.0
• k8s.io/kube-openapi v0.0.0-20260911184034-7970a1e230da
• go 1.27.1
• github.com/golangci/golangci-lint/v2 v2.13.2
• sigs.k8s.io/kube-api-linter v0.0.0-20260716143926-092fe0c72997
• k8s.io/code-generator v0.37.0

modules/tools/00_mod.mk (1)

• envtest v1.37.0

renovate-config (1)

.github/renovate.json5

---

• Check this box to trigger a request for Renovate to run again on this repository