Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

• chore(deps): update dependencies (patch & digest) (@tanstack/react-router, github/codeql-action, prettier, taiki-e/install-action, typescript-eslint)
• fix(deps): update kubernetes dependencies (k8s.io/api, k8s.io/apimachinery, k8s.io/client-go, k8s.io/code-generator, ocm.software/ocm)
• fix(deps): update dependencies (minor) (@tanstack/react-query, @types/node, eslint, ginkgo, github.com/onsi/ginkgo/v2, github.com/sigstore/sigstore, idna, jsdom, lucide-react, ocm)
• 🔐 Create all awaiting schedule PRs at once 🔐

Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

• chore(deps): update dependency ubuntu to v26

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): update golang version sync to v1.27.1 (go, golang)
• chore(deps): update dependency pymdown-extensions to v12
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

dockerfile (2)

Dockerfile (7)

• golang 1.27.0@sha256:4013ae0f9e7994f8535c58c811f8f863fbed38b72e0d51e6592156f758d66146 → [Updates: 1.27.1]
• node 24-alpine@sha256:83f1c388c31fb2e51f7cbd4dea949b96260798c98f206e8e4696bc93bd964e3a
• gcr.io/distroless/static nonroot@sha256:e2e927ec666bae08560abb3c55d0659eceabb657f56b6782ab500a9fc7f555e3
• gcr.io/distroless/static nonroot@sha256:e2e927ec666bae08560abb3c55d0659eceabb657f56b6782ab500a9fc7f555e3
• gcr.io/distroless/static nonroot@sha256:e2e927ec666bae08560abb3c55d0659eceabb657f56b6782ab500a9fc7f555e3
• gcr.io/distroless/static nonroot@sha256:e2e927ec666bae08560abb3c55d0659eceabb657f56b6782ab500a9fc7f555e3
• gcr.io/distroless/static nonroot@sha256:e2e927ec666bae08560abb3c55d0659eceabb657f56b6782ab500a9fc7f555e3

mkdocs.Dockerfile (1)

• squidfunk/mkdocs-material sha256:51b87149d227691486b5f08993d28c65ca7e4990010664b697265b8e6fcd5287

github-actions (18)

.github/workflows/changelog-preview.yaml (3)

• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• taiki-e/install-action v2.87.14@76c2e6406e52637deed7160d77bded76bd83e06e → [Updates: v2.87.19]
• ubuntu 24.04 → [Updates: 26.04]

.github/workflows/codegen.yaml (4)

• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• opendefensecloud/dev-kit v2.2.0@7427f5e62c1c45ec058e3e2b483a75d9dbe48805
• opendefensecloud/dev-kit v2.2.0@7427f5e62c1c45ec058e3e2b483a75d9dbe48805
• ubuntu 24.04 → [Updates: 26.04]

.github/workflows/conventional-commits.yml (5)

• amannn/action-semantic-pull-request v6@48f256284bd46cdaab1048c3721360e808335d50
• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• wagoid/commitlint-github-action v6@b948419dd99f3fd78a6548d48f94e3df7f6bf3ed
• ubuntu 24.04 → [Updates: 26.04]
• ubuntu 24.04 → [Updates: 26.04]

.github/workflows/docker.yaml (12)

• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• docker/metadata-action v6@dc802804100637a589fabce1cb79ff13a1411302
• docker/setup-qemu-action v4@99012661954931238ded8c8b007157a8430204e1
• docker/setup-buildx-action v4@f87e5991a6d7451dcb8d9637bfbc97413f497069
• docker/login-action v4@dbcb813823bdd20940b903addbd779551569679f
• docker/build-push-action v7@c3c9e263c25d99ce0380d002d59b67737d91b0dc
• sigstore/cosign-installer v4.1.2@6f9f17788090df1f26f669e9d70d6ae9567deba6
• anchore/sbom-action v0@e22c389904149dbc22b58101806040fa8d37a610
• actions/attest v4@1e69f48acb82d1966a394da916b4c1698aa569d6
• actions/attest v4@1e69f48acb82d1966a394da916b4c1698aa569d6
• ubuntu 24.04 → [Updates: 26.04]
• buildx latest

.github/workflows/docs-develop.yaml (4)

• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/setup-python v7@5fda3b95a4ea91299a34e894583c3862153e4b97
• ubuntu 24.04 → [Updates: 26.04]
• python 3.14.5

.github/workflows/docs-release.yaml (4)

• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/setup-python v7@5fda3b95a4ea91299a34e894583c3862153e4b97
• ubuntu 24.04 → [Updates: 26.04]
• python 3.14.5

.github/workflows/golang.yaml (13)

• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• dorny/paths-filter v4@ceb8a2b8f2d89434be7ff52d3de7ec3738c5cc9d
• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• opendefensecloud/dev-kit v2.2.0@7427f5e62c1c45ec058e3e2b483a75d9dbe48805
• actions/cache v6.1.0@55cc8345863c7cc4c66a329aec7e433d2d1c52a9
• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• opendefensecloud/dev-kit v2.2.0@7427f5e62c1c45ec058e3e2b483a75d9dbe48805
• actions/cache v6.1.0@55cc8345863c7cc4c66a329aec7e433d2d1c52a9
• jandelgado/gcov2lcov-action v1.2.0@e4612787670fc5b5f49026b8c29c5569921de1db
• coverallsapp/github-action v2.3.8@8d6379e14d29928660c4ba802d8e85393440b329
• ubuntu 24.04 → [Updates: 26.04]
• ubuntu 24.04 → [Updates: 26.04]
• ubuntu 24.04 → [Updates: 26.04]

.github/workflows/helm-lint.yaml (3)

• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• opendefensecloud/dev-kit v2.2.0@7427f5e62c1c45ec058e3e2b483a75d9dbe48805
• ubuntu 24.04 → [Updates: 26.04]

.github/workflows/helm-publish.yaml (5)

• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• opendefensecloud/dev-kit v2.2.0@7427f5e62c1c45ec058e3e2b483a75d9dbe48805
• sigstore/cosign-installer v4.1.2@6f9f17788090df1f26f669e9d70d6ae9567deba6
• docker/login-action v4@dbcb813823bdd20940b903addbd779551569679f
• ubuntu 24.04 → [Updates: 26.04]

.github/workflows/issues-add-labels.yaml (1)

• ubuntu 24.04 → [Updates: 26.04]

.github/workflows/issues-add-to-project.yml (2)

• actions/add-to-project v2.0.0@5afcf98fcd03f1c2f92c3c83f58ae24323cc57fd
• ubuntu 24.04 → [Updates: 26.04]

.github/workflows/osv-scanner.yml (2)

• google/osv-scanner-action v2.6.0@a345acffa64b0eaede81a3d9aae6141214d9c8fc
• google/osv-scanner-action v2.6.0@a345acffa64b0eaede81a3d9aae6141214d9c8fc

.github/workflows/release.yaml (9)

• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• taiki-e/install-action v2.87.14@76c2e6406e52637deed7160d77bded76bd83e06e → [Updates: v2.87.19]
• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/setup-go v7@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e
• actions/attest v4@1e69f48acb82d1966a394da916b4c1698aa569d6
• sigstore/cosign-installer v4.1.2@6f9f17788090df1f26f669e9d70d6ae9567deba6
• ubuntu 24.04 → [Updates: 26.04]
• ubuntu 24.04 → [Updates: 26.04]
• go ${{ steps.get-go-version.outputs.version }}

.github/workflows/renovate-auto-approve.yml (1)

• opendefensecloud/dev-kit v2.2.0@7427f5e62c1c45ec058e3e2b483a75d9dbe48805

.github/workflows/scorecard.yaml (5)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• ossf/scorecard-action v2.4.4@2d1146689b8cda280b9bc96326124645441f03bc
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• github/codeql-action v4.38.0@b96794f015dfd88f77b49b1c93e0fa7110f94c63 → [Updates: v4.38.1]
• ubuntu 24.04 → [Updates: 26.04]

.github/workflows/test-demo.yaml (3)

• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• opendefensecloud/dev-kit v2.2.0@7427f5e62c1c45ec058e3e2b483a75d9dbe48805
• ubuntu 24.04 → [Updates: 26.04]

.github/workflows/test-e2e.yaml (10)

• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• opendefensecloud/dev-kit v2.2.0@7427f5e62c1c45ec058e3e2b483a75d9dbe48805
• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• opendefensecloud/dev-kit v2.2.0@7427f5e62c1c45ec058e3e2b483a75d9dbe48805
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• opendefensecloud/dev-kit v2.2.0@7427f5e62c1c45ec058e3e2b483a75d9dbe48805
• ubuntu 24.04 → [Updates: 26.04]
• ubuntu 24.04 → [Updates: 26.04]
• ubuntu 24.04 → [Updates: 26.04]

.github/workflows/update-action-pins.yml (1)

• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1

gomod (1)

go.mod (34)

• go 1.27.0 → [Updates: 1.27.1]
• github.com/Masterminds/sprig/v3 v3.3.0
• github.com/cenkalti/backoff/v7 v7.0.0
• github.com/cloudevents/sdk-go/v2 v2.16.2
• github.com/coreos/go-oidc/v3 v3.21.0
• github.com/evanphx/json-patch/v5 v5.9.11
• github.com/go-logr/logr v1.4.4
• github.com/go-logr/zapr v1.3.0
• github.com/google/go-containerregistry v0.22.1
• github.com/google/uuid v1.6.0
• github.com/mandelsoft/goutils v0.0.0-20260802101738-162cd2928e3c@162cd2928e3c
• github.com/mandelsoft/vfs v0.4.5-0.20250514111339-d7b067920e91@d7b067920e91
• github.com/onsi/ginkgo/v2 v2.32.2 → [Updates: v2.33.0]
• github.com/onsi/gomega v1.43.1 → [Updates: v1.44.0]
• github.com/sigstore/cosign/v3 v3.1.3
• github.com/sigstore/sigstore v1.10.10 → [Updates: v1.11.0]
• github.com/spf13/cobra v1.10.2
• go.opendefense.cloud/kit v0.5.0
• go.uber.org/zap v1.28.0
• golang.org/x/oauth2 v0.37.0
• golang.org/x/time v0.16.0
• helm.sh/helm/v4 v4.3.0
• k8s.io/api v0.37.0 → [Updates: v0.37.1]
• k8s.io/apimachinery v0.37.0 → [Updates: v0.37.1]
• k8s.io/client-go v0.37.0 → [Updates: v0.37.1]
• k8s.io/code-generator v0.37.0 → [Updates: v0.37.1]
• k8s.io/utils v0.0.0-20260707023825-cf1189d6abe3@cf1189d6abe3
• ocm.software/ocm v0.50.0 → [Updates: v0.51.0]
• oras.land/oras-go/v2 v2.6.2
• sigs.k8s.io/controller-runtime v0.25.1
• sigs.k8s.io/randfill v1.0.0
• sigs.k8s.io/structured-merge-diff/v6 v6.4.2 → [Updates: v7.0.0]
• sigs.k8s.io/yaml v1.6.0
• github.com/eclipse-keypont/crypto11 v1.6.8

helm-values (2)

charts/solar-discovery/values.yaml

charts/solar/values.yaml (1)

• quay.io/coreos/etcd v3.6.11 → [Updates: v3.7.2]

npm (2)

web/package.json (37)

• @radix-ui/react-avatar ^1.2.0
• @radix-ui/react-dialog ^1.1.17
• @radix-ui/react-dropdown-menu ^2.1.18
• @radix-ui/react-navigation-menu ^1.2.16
• @radix-ui/react-slot ^1.3.0
• @radix-ui/react-tabs ^1.1.15
• @radix-ui/react-tooltip ^1.2.10
• @tanstack/react-query ^5.101.0 → [Updates: ^5.101.0]
• @tanstack/react-router ^1.170.16 → [Updates: ^1.170.16]
• class-variance-authority ^0.7.1
• clsx ^2.1.1
• lucide-react ^1.20.0 → [Updates: ^1.20.0]
• react ^19.2.7
• react-dom ^19.2.7
• tailwind-merge ^3.6.0
• yaml ^2.9.0
• @eslint/js ^10.0.1
• @playwright/test ^1.61.0
• @tailwindcss/vite ^4.3.1
• @testing-library/jest-dom ^7.0.0
• @testing-library/react ^16.3.2
• @types/node ^26.2.0 → [Updates: ^26.2.0]
• @types/react ^19.2.17
• @types/react-dom ^19.2.3
• @vitejs/plugin-react ^6.0.2
• concurrently ^10.0.3
• eslint ^10.5.0 → [Updates: ^10.5.0]
• eslint-plugin-react-hooks ^7.1.1
• eslint-plugin-react-refresh ^0.5.3
• globals ^17.6.0
• jsdom ^30.0.0 → [Updates: ^30.0.0]
• prettier ^3.6.2 → [Updates: ^3.6.2]
• tailwindcss ^4.3.1
• typescript ~7.0.0
• typescript-eslint ^8.61.1 → [Updates: ^8.61.1]
• vite ^8.0.16 → [Updates: ^8.0.16]
• vitest ^5.0.0 → [Updates: ^5.0.0]

web/pnpm-workspace.yaml

pip_requirements (1)

docs/requirements.txt (10)

• mkdocs-material ==9.7.7
• pymdown-extensions ==11.0.2 → [Updates: ==12.0.1]
• mkdocs-glightbox == 0.5.2
• mkdocs-include-markdown-plugin == 7.3.0
• mkdocs-panzoom-plugin == 0.5.2
• mkdocs-awesome-nav == 3.3.0
• pillow ==12.3.0
• cairosvg ==2.9.1
• mike == 2.2.0
• idna ==3.19 → [Updates: ==3.20]

regex (7)

flake.nix (1)

• go 1.27.0 → [Updates: 1.27.1]

Makefile (1)

• opendefensecloud/dev-kit v2.2.0

Makefile (1)

• kindest/node 1.37.0

Makefile (1)

• cert-manager/cert-manager v1.21.2

Makefile (1)

• cert-manager/trust-manager v0.25.0

Makefile (1)

• ghcr.io/project-zot/helm-charts/zot 0.1.116 → [Updates: 0.1.125]

tools.lock (10)

• addlicense v1.2.0
• controller-gen v0.22.0
• cosign v3.1.3
• crd-ref-docs v0.3.0
• ginkgo v2.32.2 → [Updates: v2.33.0]
• golangci-lint v2.13.2 → [Updates: v2.14.0]
• helm-docs v1.14.2
• ocm v0.50.0 → [Updates: v0.51.0]
• openapi-gen v0.0.0-20260414162039-ec9c827d403f
• osv-scanner v2.6.0

renovate-config (1)

renovate.json

---

• Check this box to trigger a request for Renovate to run again on this repository