Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Pending Approval

These branches will be created by Renovate only once you click their checkbox below.

• chore(deps): update module github.com/kumahq/go-control-plane to v0.13.4
• chore(deps): update module github.com/kumahq/go-control-plane/contrib to v1.32.3
• chore(deps): update module github.com/kumahq/go-control-plane/envoy to v1.32.3
• chore(deps): update module github.com/kumahq/go-control-plane/ratelimit to v0.1.0
• 🔐 Create all pending approval PRs at once 🔐

Open

These updates have all been created already. Click a checkbox below to force a retry/rebase of any.

• chore(deps): update module github.com/golang-jwt/jwt/v4 to v5

Detected dependencies

dockerfile

test/dockerfiles/postgres.dockerfile

• postgres latest@sha256:87ec5e0a167dc7d4831729f9e1d2ee7b8597dcc49ccd9e43cc5f89e808d2adae
• postgres latest@sha256:87ec5e0a167dc7d4831729f9e1d2ee7b8597dcc49ccd9e43cc5f89e808d2adae

test/dockerfiles/universal.Dockerfile

• ghcr.io/kumahq/ubuntu-netools main@sha256:5417a86c3f7d67be1e18a144fff765cde9c1d6839145a6771855989752dfcda2

tools/releases/dockerfiles/base-root.Dockerfile

• gcr.io/distroless/base-nossl-debian11 debug@sha256:d66c60eff6c55972af9e661a57c1afe96ef4ddfa4fff37b625a448df41a15820

tools/releases/dockerfiles/base.Dockerfile

• gcr.io/distroless/base-nossl-debian11 debug-nonroot@sha256:934b713496a9ed100550aaa58636270c4d69c27040e44f2aed1fa39594c45eba

tools/releases/dockerfiles/envoy.Dockerfile

• debian 12.9@sha256:321341744acb788e251ebd374aecc1a42d60ce65da7bd4ee9207ff6be6686a62

tools/releases/dockerfiles/kuma-cni.Dockerfile

tools/releases/dockerfiles/kuma-cp.Dockerfile

tools/releases/dockerfiles/kuma-dp.Dockerfile

tools/releases/dockerfiles/kuma-init.Dockerfile

• gcr.io/k8s-staging-build-image/distroless-iptables v0.7.0@sha256:f65e3f1d8a65bfd45cb5eaa60a3d4ed67c7c37a09ca2806bbe1696096b6f1945

tools/releases/dockerfiles/kumactl.Dockerfile

tools/releases/dockerfiles/static.Dockerfile

• gcr.io/distroless/static-debian11 debug-nonroot@sha256:55716e80a7d4320ce9bc2dc8636fc193b418638041b817cf3306696bd0f975d1

github-actions

.github/workflows/_build_publish.yaml

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/setup-go v5.3.0@f111f3307d8850f501ac008e886eec1fd1932a34
• actions/cache v4.2.0@1bd1e32a3bdc45362d1e726936510720a7c30a57
• actions/upload-artifact v4.6.0@65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08
• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/setup-go v5.3.0@f111f3307d8850f501ac008e886eec1fd1932a34
• actions/cache v4.2.0@1bd1e32a3bdc45362d1e726936510720a7c30a57
• regclient/actions ce5fd131e371ffcdd7508b478cb223b3511a9183
• actions/upload-artifact v4.6.0@65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08
• actions/upload-artifact v4.6.0@65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08
• actions/download-artifact v4.1.8@fa0a91b85d4f404e444e00e005971372dc801d16
• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/setup-go v5.3.0@f111f3307d8850f501ac008e886eec1fd1932a34
• actions/cache v4.2.0@1bd1e32a3bdc45362d1e726936510720a7c30a57
• actions/upload-artifact v4.6.0@65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08
• actions/create-github-app-token v1.11.1@c1a285145b9d317df6ced56c09f525b5c2b6f755
• ubuntu 24.04
• ubuntu 24.04
• ubuntu 24.04
• ubuntu 24.04

.github/workflows/_e2e.yaml

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/setup-go v5.3.0@f111f3307d8850f501ac008e886eec1fd1932a34
• actions/cache v4.2.0@1bd1e32a3bdc45362d1e726936510720a7c30a57
• nick-fields/retry v3.0.0@7152eba30c6575329ac0576536151aca5a72780e
• actions/upload-artifact v4.6.0@65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08
• actions/upload-artifact v4.6.0@65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08

.github/workflows/_provenance.yaml

• slsa-framework/slsa-github-generator v2.0.0
• slsa-framework/slsa-github-generator v2.0.0

.github/workflows/_test.yaml

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/setup-go v5.3.0@f111f3307d8850f501ac008e886eec1fd1932a34
• actions/cache v4.2.0@1bd1e32a3bdc45362d1e726936510720a7c30a57
• ubuntu 24.04
• ubuntu 24.04

.github/workflows/auto-merge.yaml

• actions/create-github-app-token v1.11.1@c1a285145b9d317df6ced56c09f525b5c2b6f755
• ubuntu 24.04

.github/workflows/bom.yaml

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/setup-go v5.3.0@f111f3307d8850f501ac008e886eec1fd1932a34
• CycloneDX/gh-gomod-generate-sbom v2.0.0@efc74245d6802c8cefd925620515442756c70d8f
• actions/upload-artifact v4.6.0@65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08
• ubuntu 24.04

.github/workflows/build-test-distribute.yaml

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/setup-go v5.3.0@f111f3307d8850f501ac008e886eec1fd1932a34
• golangci/golangci-lint-action v6.2.0@ec5d18412c0aeab7936cb16880d708ba2a64e1ae
• actions/cache v4.2.0@1bd1e32a3bdc45362d1e726936510720a7c30a57
• actions/download-artifact v4.1.8@fa0a91b85d4f404e444e00e005971372dc801d16
• actions/download-artifact v4.1.8@fa0a91b85d4f404e444e00e005971372dc801d16
• cloudsmith-io/action v0.6.14@7af394e0f8add4867bce109385962dafecad1b8d
• ubuntu 24.04
• ubuntu 24.04

.github/workflows/check.yaml

• ubuntu 24.04

.github/workflows/ci-stability-release-branches.yaml

• ubuntu 24.04
• ubuntu 24.04

.github/workflows/ci-stability.yaml

• actions/create-github-app-token v1.11.1@c1a285145b9d317df6ced56c09f525b5c2b6f755
• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• ubuntu 24.04

.github/workflows/codeql.yaml

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/setup-go v5.3.0@f111f3307d8850f501ac008e886eec1fd1932a34
• github/codeql-action v3.28.6@17a820bf2e43b47be2c72b39cc905417bc1ab6d0
• github/codeql-action v3.28.6@17a820bf2e43b47be2c72b39cc905417bc1ab6d0
• github/codeql-action v3.28.6@17a820bf2e43b47be2c72b39cc905417bc1ab6d0
• ubuntu 24.04

.github/workflows/lifecycle.yml

• kumahq/.github f98e381472c34234ecdaa4f26d72996d55d16759

.github/workflows/merge-release-to-master.yaml

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/setup-go v5.3.0@f111f3307d8850f501ac008e886eec1fd1932a34
• actions/create-github-app-token v1.11.1@c1a285145b9d317df6ced56c09f525b5c2b6f755
• peter-evans/create-pull-request v7.0.6@67ccf781d68cd99b580ae25a5c18a1cc84ffff1f
• ubuntu 24.04

.github/workflows/pr-comments.yaml

• actions/create-github-app-token v1.11.1@c1a285145b9d317df6ced56c09f525b5c2b6f755
• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/setup-go v5.3.0@f111f3307d8850f501ac008e886eec1fd1932a34
• actions/cache v4.2.0@1bd1e32a3bdc45362d1e726936510720a7c30a57
• ubuntu 24.04

.github/workflows/pr-merged.yaml

• actions/github-script v7.0.1@60a0d83039c74a4aee543508d2ffcb1c3799cdea
• ubuntu 24.04

.github/workflows/pr-modification.yaml

• marocchino/sticky-pull-request-comment v2.9.1@52423e01640425a022ef5fd42c6fb5f633a02728
• ubuntu 24.04
• ubuntu 24.04

.github/workflows/release.yaml

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/setup-go v5.3.0@f111f3307d8850f501ac008e886eec1fd1932a34
• actions/create-github-app-token v1.11.1@c1a285145b9d317df6ced56c09f525b5c2b6f755
• peter-evans/create-pull-request v7.0.6@67ccf781d68cd99b580ae25a5c18a1cc84ffff1f
• ubuntu 24.04

.github/workflows/scorecard.yml

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• ossf/scorecard-action v2.4.0@62b2cac7ed8198b15735ed49ab1e5cf35480ba46
• actions/upload-artifact v4.6.0@65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08
• github/codeql-action v3.28.6@17a820bf2e43b47be2c72b39cc905417bc1ab6d0
• ubuntu 24.04

.github/workflows/transparentproxy-tests.yaml

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/setup-go v5.3.0@f111f3307d8850f501ac008e886eec1fd1932a34
• actions/cache v4.2.0@1bd1e32a3bdc45362d1e726936510720a7c30a57
• ubuntu 24.04

.github/workflows/update-docs.yaml

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/setup-go v5.3.0@f111f3307d8850f501ac008e886eec1fd1932a34
• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/create-github-app-token v1.11.1@c1a285145b9d317df6ced56c09f525b5c2b6f755
• peter-evans/create-pull-request v7.0.6@67ccf781d68cd99b580ae25a5c18a1cc84ffff1f
• ubuntu 24.04

.github/workflows/update-insecure-dependencies.yaml

• pierotofy/set-swap-space 0404882bc4666c0ff2f6fd8b3d32af69a730183c
• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/setup-go v5.3.0@f111f3307d8850f501ac008e886eec1fd1932a34
• actions/create-github-app-token v1.11.1@c1a285145b9d317df6ced56c09f525b5c2b6f755
• peter-evans/create-pull-request v7.0.6@67ccf781d68cd99b580ae25a5c18a1cc84ffff1f
• ubuntu 24.04
• ubuntu 24.04

gomod

go.mod

• go 1.23.5
• cirello.io/pglock v1.16.0
• github.com/Masterminds/semver/v3 v3.3.1
• github.com/Masterminds/sprig/v3 v3.3.0
• github.com/Nordix/simple-ipam v1.0.0
• github.com/asaskevich/govalidator v0.0.0-20230301143203-a9d515a09cc2@a9d515a09cc2
• github.com/bakito/go-log-logr-adapter v0.0.3-0.20240527124623-de85860b7d21@de85860b7d21
• github.com/cilium/ebpf v0.17.2
• github.com/containernetworking/cni v1.2.3
• github.com/containernetworking/plugins v1.6.2
• github.com/emicklei/go-restful/v3 v3.12.1
• github.com/envoyproxy/go-control-plane v0.13.4
• github.com/envoyproxy/go-control-plane/contrib v1.32.3
• github.com/envoyproxy/go-control-plane/envoy v1.32.3
• github.com/envoyproxy/protoc-gen-validate v1.2.1
• github.com/evanphx/json-patch/v5 v5.9.11
• github.com/exaring/otelpgx v0.9.0
• github.com/go-logr/logr v1.4.2
• github.com/go-logr/zapr v1.3.0
• github.com/goburrow/cache v0.1.4
• github.com/golang-jwt/jwt/v4 v4.5.1
• github.com/golang-migrate/migrate/v4 v4.18.2
• github.com/golang/protobuf v1.5.4
• github.com/google/go-cmp v0.6.0
• github.com/google/uuid v1.6.0
• github.com/grpc-ecosystem/go-grpc-prometheus v1.2.0
• github.com/gruntwork-io/terratest v0.48.1
• github.com/hoisie/mustache v0.0.0-20160804235033-6375acf62c69@6375acf62c69
• github.com/jackc/pgx/v5 v5.7.2
• github.com/josephburnett/jd/v2 v2.0.0-20240818191833-6125a15c637a@6125a15c637a
• github.com/kelseyhightower/envconfig v1.4.0
• github.com/kennygrant/sanitize v1.2.4
• github.com/miekg/dns v1.1.63
• github.com/moby/sys/mountinfo v0.7.2
• github.com/natefinch/atomic v1.0.1
• github.com/onsi/ginkgo/v2 v2.22.2
• github.com/onsi/gomega v1.36.2
• github.com/patrickmn/go-cache v2.1.0+incompatible
• github.com/pkg/errors v0.9.1
• github.com/prometheus/client_golang v1.20.5
• github.com/prometheus/client_model v0.6.1
• github.com/prometheus/common v0.62.0
• github.com/sethvargo/go-retry v0.3.0
• github.com/shopspring/decimal v1.4.0
• github.com/slok/go-http-metrics v0.13.0
• github.com/spf13/cobra v1.8.1
• github.com/spf13/pflag v1.0.5
• github.com/spiffe/go-spiffe/v2 v2.4.0
• github.com/testcontainers/testcontainers-go v0.35.0
• github.com/tonglil/opentelemetry-go-datadog-propagator v0.1.3
• github.com/vishvananda/netlink v1.3.0
• github.com/vishvananda/netns v0.0.5
• go.opentelemetry.io/contrib/instrumentation/github.com/emicklei/go-restful/otelrestful v0.59.0
• go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.59.0
• go.opentelemetry.io/otel v1.34.0
• go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc v1.34.0
• go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.34.0
• go.opentelemetry.io/otel/exporters/prometheus v0.56.0
• go.opentelemetry.io/otel/sdk v1.34.0
• go.opentelemetry.io/otel/sdk/metric v1.34.0
• go.opentelemetry.io/otel/trace v1.34.0
• go.opentelemetry.io/proto/otlp v1.5.0
• go.uber.org/multierr v1.11.0
• go.uber.org/zap v1.27.0
• golang.org/x/net v0.34.0
• golang.org/x/sync v0.10.0
• golang.org/x/sys v0.29.0
• golang.org/x/text v0.21.0
• gonum.org/v1/gonum v0.15.1
• google.golang.org/genproto/googleapis/api v0.0.0-20250127172529-29210b9bc287@29210b9bc287
• google.golang.org/genproto/googleapis/rpc v0.0.0-20250127172529-29210b9bc287@29210b9bc287
• google.golang.org/grpc v1.70.0
• google.golang.org/protobuf v1.36.4
• gopkg.in/natefinch/lumberjack.v2 v2.2.1
• helm.sh/helm/v3 v3.17.0
• k8s.io/api v0.32.1
• k8s.io/apiextensions-apiserver v0.32.1
• k8s.io/apimachinery v0.32.1
• k8s.io/client-go v0.32.1
• k8s.io/klog/v2 v2.130.1
• k8s.io/kube-openapi v0.0.0-20241212222426-2c72e554b1e7@2c72e554b1e7
• k8s.io/kubectl v0.32.1
• k8s.io/utils v0.0.0-20241210054802-24370beab758@24370beab758
• sigs.k8s.io/controller-runtime v0.20.1
• sigs.k8s.io/controller-tools v0.17.1
• sigs.k8s.io/gateway-api v1.2.1
• sigs.k8s.io/yaml v1.4.0
• github.com/invopop/jsonschema v0.13.0
• github.com/wk8/go-ordered-map/v2 v2.1.8
• golang.org/x/exp v0.0.0-20250128182459-e0ece0dbea4c@e0ece0dbea4c
• github.com/kumahq/go-control-plane/envoy v1.32.3-kong-1
• github.com/kumahq/go-control-plane/contrib v1.32.3-kong-1
• github.com/kumahq/go-control-plane/ratelimit v0.1.0-kong-1
• github.com/kumahq/go-control-plane v0.13.4-kong-1

regex

.github/workflows/_build_publish.yaml

• security-actions/scan-docker-image 4.0.1@a5b1cfac7d55d8cf9390456a1e6799425e28840d
• security-actions/scan-docker-image 4.0.1@a5b1cfac7d55d8cf9390456a1e6799425e28840d
• security-actions/sign-docker-image 4.0.1@fbf0fcb6762ab4080fd2813d2e3eec0564cbdbf0

.github/workflows/build-test-distribute.yaml

• security-actions/sca 4.0.1@a5b1cfac7d55d8cf9390456a1e6799425e28840d

---

• Check this box to trigger a request for Renovate to run again on this repository