Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

PR Edited (Blocked)

The following updates have been manually edited so Renovate will no longer make changes. To discard all commits and start over, click on a checkbox below.

• Renovate: Update External dependencies (github.com/ironcore-dev/metal-operator, github.com/metal3-io/baremetal-operator/apis, github.com/onsi/ginkgo/v2, github.com/onsi/gomega, go.uber.org/zap, golang.org/x/time, sigs.k8s.io/cluster-api, sigs.k8s.io/controller-runtime)

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• Renovate: Update go toolchain directive to v1.26.3 [SECURITY]
• Renovate: Update k8s.io/utils digest to ff6756f
• Renovate: Update github.com/sapcc (github.com/sapcc/go-api-declarations, github.com/sapcc/go-netbox-go)
• Renovate: Update azure/setup-helm action to v5
• Click on this checkbox to rebase all open PRs at once

Vulnerabilities

Important

21/21 CVEs have Renovate fixes.

gomod

go.mod

go

• GO-2026-4599 (fixed in >= 1.26.1)
• GO-2026-4600 (fixed in >= 1.26.1)
• GO-2026-4601 (fixed in >= 1.26.1)
• GO-2026-4602 (fixed in >= 1.26.1)
• GO-2026-4603 (fixed in >= 1.26.1)
• GO-2026-4864 (fixed in >= 1.26.2)
• GO-2026-4865 (fixed in >= 1.26.2)
• GO-2026-4866 (fixed in >= 1.26.2)
• GO-2026-4869 (fixed in >= 1.26.2)
• GO-2026-4870 (fixed in >= 1.26.2)
• GO-2026-4918 (fixed in >= 1.26.3)
• GO-2026-4946 (fixed in >= 1.26.2)
• GO-2026-4947 (fixed in >= 1.26.2)
• GO-2026-4971 (fixed in >= 1.26.3)
• GO-2026-4976 (fixed in >= 1.26.3)
• GO-2026-4977 (fixed in >= 1.26.3)
• GO-2026-4980 (fixed in >= 1.26.3)
• GO-2026-4981 (fixed in >= 1.26.3)
• GO-2026-4982 (fixed in >= 1.26.3)
• GO-2026-4986 (fixed in >= 1.26.3)

golang.org/x/net

• GO-2026-4918 (fixed in >= 0.53.0)

Detected Dependencies

github-actions (6)

.github/workflows/checks.yaml (6)

• actions/checkout v6
• actions/setup-go v6
• golangci/golangci-lint-action v9
• crate-ci/typos v1
• fsfe/reuse-action v6
• go 1.26.3

.github/workflows/ci.yaml (9)

• actions/checkout v6
• actions/setup-go v6
• actions/checkout v6
• fgrosse/go-coverage-report v1.3.0
• actions/checkout v6
• actions/setup-go v6
• actions/upload-artifact v7
• go 1.26.3
• go 1.26.3

.github/workflows/codeql.yaml (6)

• actions/checkout v6
• actions/setup-go v6
• github/codeql-action v4
• github/codeql-action v4
• github/codeql-action v4
• go 1.26.3

.github/workflows/container-registry-ghcr.yaml (6)

• actions/checkout v6
• docker/login-action v4
• docker/metadata-action v6
• docker/setup-qemu-action v4
• docker/setup-buildx-action v4
• docker/build-push-action v7

.github/workflows/publish-chart.yml (2)

• actions/checkout v6
• azure/setup-helm v4 → [Updates: v5]

.github/workflows/test-chart.yml (2)

• actions/checkout v6
• actions/setup-go v6

gomod (1)

go.mod (20)

• go 1.26.0 → [Updates: 1.26.3]
• github.com/dspinhirne/netaddr-go/v2 v2.0.0
• github.com/metal3-io/baremetal-operator/apis v0.9.1 → [Updates: v0.13.0]
• github.com/sapcc/go-api-declarations v1.18.0 → [Updates: v1.22.0]
• github.com/sapcc/go-netbox-go v0.0.0-20260116110245-ae1897937f74@ae1897937f74 → [Updates: v0.0.0-20260116110245-ae1897937f74]
• k8s.io/api v0.35.0
• sigs.k8s.io/cluster-api v1.12.2 → [Updates: v1.13.2]
• sigs.k8s.io/controller-runtime v0.23.1 → [Updates: v0.24.1]
• github.com/go-logr/logr v1.4.3
• github.com/ironcore-dev/metal-operator v0.4.1-0.20260421110056-35ee54d01cbc@35ee54d01cbc → [Updates: v0.5.0]
• github.com/onsi/ginkgo/v2 v2.28.1 → [Updates: v2.28.3]
• github.com/onsi/gomega v1.39.1 → [Updates: v1.40.0]
• github.com/pkg/errors v0.9.1
• go.uber.org/zap v1.27.1 → [Updates: v1.28.0]
• golang.org/x/time v0.14.0 → [Updates: v0.15.0]
• gopkg.in/yaml.v3 v3.0.1
• k8s.io/apimachinery v0.35.0
• k8s.io/client-go v0.35.0
• k8s.io/utils v0.0.0-20260108192941-914a6e750570@914a6e750570 → [Updates: v0.0.0-20260108192941-914a6e750570]
• sigs.k8s.io/cluster-api-ipam-provider-in-cluster v1.0.3

helm-values (1)

dist/chart/values.yaml

kustomize (1)

config/manager/kustomization.yaml

renovate-config (1)

.github/renovate.json

---

• Check this box to trigger a request for Renovate to run again on this repository