Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• chore(deps): update docker/setup-qemu-action digest to 1f40c72
• chore(deps): update module ginkgo to v2.32.2
• chore(deps): update dependency helm to v4.3.0
• fix(deps): update module github.com/onsi/ginkgo/v2 to v2.32.2
• fix(deps): update module github.com/onsi/gomega to v1.43.0
• fix(deps): update module sigs.k8s.io/controller-runtime to v0.25.0
• chore(deps): update actions/setup-go action to v7
• chore(deps): update dependency opendefensecloud/dev-kit to v2
• 🔐 Create all rate-limited PRs at once 🔐

Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

• chore(deps): update gcr.io/distroless/static:nonroot docker digest to 1c2c046
• chore(deps): update ghcr.io/opendefensecloud/krop-controller docker digest to a5389ab

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): update dorny/paths-filter digest to ceb8a2b
• chore(deps): update softprops/action-gh-release digest to efb3536
• fix(deps): update module github.com/kcp-dev/sdk to v0.32.3
• fix(deps): update module github.com/kubernetes-sigs/kro to v0.9.4
• chore(deps): update golang version sync (go, golang)
• chore(deps): update google/osv-scanner-action action to v2.5.1
• chore(deps): update module controller-gen to v0.22.0
• chore(deps): update module golangci-lint to v2.13.2
• chore(deps): update module osv-scanner to v2.5.1
• fix(deps): update kubernetes monorepo to v0.37.0 (k8s.io/apiextensions-apiserver, k8s.io/apimachinery, k8s.io/client-go)
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

dockerfile (1)

Dockerfile (2)

• golang 1.26 → [Updates: 1.27, 1.26]
• gcr.io/distroless/static nonroot@sha256:f7f8f729987ad0fdf6b05eeeae94b26e6a0f613bdf46feea7fc40f7bd72953e6 → [Updates: nonroot]

github-actions (10)

.github/workflows/codegen.yaml (5)

• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• opendefensecloud/dev-kit v1.0.15@f16fb83a8669ba840346929d9c45b9efe95c4da0 → [Updates: v2.2.0]
• actions/setup-go v6@924ae3a1cded613372ab5595356fb5720e22ba16 → [Updates: v7]
• opendefensecloud/dev-kit v1.0.15@f16fb83a8669ba840346929d9c45b9efe95c4da0 → [Updates: v2.2.0]
• ubuntu 24.04

.github/workflows/conventional-commits.yml (5)

• amannn/action-semantic-pull-request v6@48f256284bd46cdaab1048c3721360e808335d50
• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• wagoid/commitlint-github-action v6@b948419dd99f3fd78a6548d48f94e3df7f6bf3ed
• ubuntu 24.04
• ubuntu 24.04

.github/workflows/docker.yaml (11)

• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• docker/metadata-action v6@dc802804100637a589fabce1cb79ff13a1411302
• docker/setup-qemu-action v4@96fe6ef7f33517b61c61be40b68a1882f3264fb8 → [Updates: v4]
• docker/setup-buildx-action v4@37fe631027851001ddb9b187196cc803df7f5f0e
• docker/login-action v4@dbcb813823bdd20940b903addbd779551569679f
• docker/build-push-action v7@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a
• sigstore/cosign-installer v4.1.2@6f9f17788090df1f26f669e9d70d6ae9567deba6
• anchore/sbom-action v0@e22c389904149dbc22b58101806040fa8d37a610
• actions/attest v4@1e69f48acb82d1966a394da916b4c1698aa569d6
• actions/attest v4@1e69f48acb82d1966a394da916b4c1698aa569d6
• ubuntu 24.04

.github/workflows/golang.yaml (11)

• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• dorny/paths-filter v4@7b450fff21473bca461d4b92ce414b9d0420d706 → [Updates: v4]
• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• opendefensecloud/dev-kit v1.0.15@f16fb83a8669ba840346929d9c45b9efe95c4da0 → [Updates: v2.2.0]
• actions/setup-go v6@924ae3a1cded613372ab5595356fb5720e22ba16 → [Updates: v7]
• golangci/golangci-lint-action v9@ba0d7d2ec06a0ea1cb5fa41b2e4a3ab91d21278a
• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/setup-go v6@924ae3a1cded613372ab5595356fb5720e22ba16 → [Updates: v7]
• ubuntu 24.04
• ubuntu 24.04
• ubuntu 24.04

.github/workflows/helm-lint.yaml (4)

• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• azure/setup-helm v5@9bc31f4ebc9c6b171d7bfbaa5d006ae7abdb4310
• ubuntu 24.04
• helm v4.2.4 → [Updates: v4.3.0]

.github/workflows/helm-publish.yaml (6)

• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• azure/setup-helm v5@9bc31f4ebc9c6b171d7bfbaa5d006ae7abdb4310
• sigstore/cosign-installer v4.1.2@6f9f17788090df1f26f669e9d70d6ae9567deba6
• docker/login-action v4@dbcb813823bdd20940b903addbd779551569679f
• ubuntu 24.04
• helm v4.2.4 → [Updates: v4.3.0]

.github/workflows/osv-scanner.yml (2)

• google/osv-scanner-action v2.3.8@9a498708959aeaef5ef730655706c5a1df1edbc2 → [Updates: v2.5.1]
• google/osv-scanner-action v2.3.8@9a498708959aeaef5ef730655706c5a1df1edbc2 → [Updates: v2.5.1]

.github/workflows/release-drafter.yaml (2)

• release-drafter/release-drafter v7@34d80673e067bdc0c24568d3af899c216adcfaa9
• ubuntu 24.04

.github/workflows/release.yaml (6)

• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/setup-go v6@924ae3a1cded613372ab5595356fb5720e22ba16 → [Updates: v7]
• actions/attest v4@1e69f48acb82d1966a394da916b4c1698aa569d6
• sigstore/cosign-installer v4.1.2@6f9f17788090df1f26f669e9d70d6ae9567deba6
• softprops/action-gh-release v3@3d0d9888cb7fd7b750713d6e236d1fcb99157228 → [Updates: v3]
• ubuntu 24.04

.github/workflows/update-action-pins.yml (1)

• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1

gomod (1)

go.mod (14)

• go 1.26.4 → [Updates: 1.27.1]
• github.com/kcp-dev/logicalcluster/v3 v3.0.5
• github.com/kcp-dev/multicluster-provider v0.8.0
• github.com/kcp-dev/multicluster-provider/client v0.8.0
• github.com/kcp-dev/sdk v0.32.2 → [Updates: v0.32.3]
• github.com/kubernetes-sigs/kro v0.9.2 → [Updates: v0.9.4]
• github.com/onsi/ginkgo/v2 v2.30.0 → [Updates: v2.32.2]
• github.com/onsi/gomega v1.41.0 → [Updates: v1.43.0]
• k8s.io/apiextensions-apiserver v0.36.2 → [Updates: v0.37.0]
• k8s.io/apimachinery v0.36.2 → [Updates: v0.37.0]
• k8s.io/client-go v0.36.2 → [Updates: v0.37.0]
• sigs.k8s.io/controller-runtime v0.24.1 → [Updates: v0.25.0]
• sigs.k8s.io/multicluster-runtime v0.24.1
• sigs.k8s.io/yaml v1.6.0

helm-values (1)

charts/krop-controller/values.yaml (1)

• ghcr.io/opendefensecloud/krop-controller sha256:d14c6f54fa34f0f404f44d5dff13e11500e800bd449a50c8c552be9746a6d9a5 → [Updates: ``]

nix (1)

flake.nix (4)

• dev-kit lock file @ 41370fd52f6889401ef79388e54e7e38bfbf112e
• flake-utils lock file @ 11707dc2f618dd54ca8739b309ec4fc024de578b
• go-overlay lock file @ 64e540368a47fa876824900b54474fa4e99005ae
• nixpkgs nixos-unstable

regex (3)

flake.nix (1)

• go 1.26.4 → [Updates: 1.27.1]

Makefile (1)

• opendefensecloud/dev-kit v1.0.15 → [Updates: v2.2.0]

tools.lock (6)

• addlicense v1.2.0
• apigen v0.32.3
• controller-gen v0.20.0 → [Updates: v0.22.0]
• ginkgo v2.32.0 → [Updates: v2.32.2]
• golangci-lint v2.12.2 → [Updates: v2.13.2]
• osv-scanner v2.4.0 → [Updates: v2.5.1]

---

• Check this box to trigger a request for Renovate to run again on this repository