Dependency Dashboard 🤖

[cluster-stack-bot]

Config Migration Needed

• Select this checkbox to let Renovate create an automated Config Migration PR.

Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

• 🌱 Update Builder Image group to v3.23.2
• 🌱 Update Github Actions group to v44.2.1
• 🔐 Create all awaiting schedule PRs at once 🔐

PR Edited (Blocked)

The following updates have been manually edited so Renovate will no longer make changes. To discard all commits and start over, click on a checkbox below.

• 🌱 Update Golang Dependencies group to v0.27.0 [SECURITY]
• 🌱 Update Golang Dependencies group to v3.18.5 [SECURITY]
• 🌱 Update Update Golang Dependencies group (minor) (github.com/spf13/cobra, go, golang.org/x/mod, oras.land/oras-go/v2)
• 🌱 Update Github Actions group to 24.12.0

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• 🌱 Update github-actions group (actions/cache, actions/checkout, actions/setup-go, actions/setup-node, docker/build-push-action, docker/login-action, docker/setup-buildx-action, goreleaser/goreleaser-action, lycheeverse/lychee-action)
• 🌱 Update github-actions group (major) (actions/checkout, actions/labeler, actions/setup-go, actions/setup-node, peter-evans/create-issue-from-file)
• 🌱 Update github-actions group (major) (actions/cache, actions/checkout, actions/setup-node)
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

dockerfile (1)

images/builder/Dockerfile (5)

• docker.io/library/alpine 3.23.0@sha256:51183f2cfa6320055da30872f211093f9ff1d3cf06f39a0bdb212314c5dc7375 → [Updates: 3.23.2]
• docker.io/library/alpine 3.23.0@sha256:51183f2cfa6320055da30872f211093f9ff1d3cf06f39a0bdb212314c5dc7375 → [Updates: 3.23.2]
• docker.io/hadolint/hadolint v2.14.0-alpine@sha256:7aba693c1442eb31c0b015c129697cb3b6cb7da589d85c7562f9deb435a6657c
• docker.io/aquasec/trivy 0.68.2@sha256:05d0126976bdedcd0782a0336f77832dbea1c81b9cc5e4b3a5ea5d2ec863aca7
• docker.io/library/golang 1.22-bullseye → [Updates: 1.24-bullseye]

github-actions (7)

.github/actions/setup-go/action.yaml (3)

• actions/setup-go v5.3.0@f111f3307d8850f501ac008e886eec1fd1932a34 → [Updates: v5.6.0, v6.1.0]
• actions/cache v4@0c907a75c2c80ebcb7f088228285e798b750cf8f → [Updates: v5, v4]
• actions/cache v4@0c907a75c2c80ebcb7f088228285e798b750cf8f → [Updates: v5, v4]

.github/workflows/builder-image.yml (4)

• actions/checkout v4@11bd71901bbe5b1630ceea73d27597364c9af683 → [Updates: v5, v6, v4]
• docker/setup-buildx-action v3@f7ce87c1d6bead3e36075b2ce75da1f6cc28aaca → [Updates: v3]
• docker/login-action v3@9780b0c442fbb1117ed29e0efdff1e18412f7567 → [Updates: v3]
• docker/build-push-action v6@0adf9959216b96bec444f325f1e493d4aa344497 → [Updates: v6]

.github/workflows/pr-lint.yml (2)

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683 → [Updates: v4.3.1, v5.0.1, v6.0.1]
• ghcr.io/sovereigncloudstack/csctl-builder 0.2.3

.github/workflows/pr-verify.yml (8)

• kubernetes-sigs/kubebuilder-release-tools v0.4.3@012269a88fa4c034a0acf1ba84c26b195c0dbab4
• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683 → [Updates: v4.3.1, v5.0.1, v6.0.1]
• actions/setup-node v4@1d0ff469b7ec7b3cb9d8673fde0c81c44821de2a → [Updates: v5, v6, v4]
• tibdex/github-app-token v2@3beb63f4bd073e61482598c45c71c1019b59b73a
• pascalgn/size-label-action v0.5.5@f8edde36b3be04b4f65dcfead05dc8691b374348
• actions/labeler v5@8558fd74291d67161a8a78ce36a881fa63b766a9 → [Updates: v6]
• EndBug/label-sync v2@52074158190acb45f3077f9099fea818aa43f97a
• node 22 → [Updates: 24]

.github/workflows/release.yml (3)

• actions/checkout v4@11bd71901bbe5b1630ceea73d27597364c9af683 → [Updates: v5, v6, v4]
• actions/setup-go v5@f111f3307d8850f501ac008e886eec1fd1932a34 → [Updates: v6, v5]
• goreleaser/goreleaser-action v6@90a3faa9d0182683851fbfa97ca1a2cb983bfca3 → [Updates: v6]

.github/workflows/schedule-link-checker.yml (5)

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683 → [Updates: v4.3.1, v5.0.1, v6.0.1]
• tibdex/github-app-token v2@3beb63f4bd073e61482598c45c71c1019b59b73a
• lycheeverse/lychee-action v2.3.0@f613c4a64e50d792e0b31ec34bbcbba12263c6a6 → [Updates: v2.7.0]
• micalevisk/last-issue-action v2@0d40124cc99ac8601c2516007f0c98ef3d27537b
• peter-evans/create-issue-from-file v5@e8ef132d6df98ed982188e460ebb3b5d4ef3a9cd → [Updates: v6]

.github/workflows/schedule-update-bot.yaml (3)

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683 → [Updates: v4.3.1, v5.0.1, v6.0.1]
• tibdex/github-app-token v2@3beb63f4bd073e61482598c45c71c1019b59b73a
• renovatebot/github-action v44.2.0@822441559e94f98b67b82d97ab89fe3003b0a247 → [Updates: v44.2.1]

gomod (1)

go.mod (12)

• go 1.22.0
• go 1.22.12 → [Updates: 1.25.5]
• github.com/SovereignCloudStack/cluster-stack-operator v0.1.0-alpha.9
• github.com/opencontainers/image-spec v1.1.1
• github.com/spf13/cobra v1.8.1 → [Updates: v1.10.2]
• github.com/valyala/fasttemplate v1.2.2
• golang.org/x/mod v0.22.0 → [Updates: v0.31.0]
• golang.org/x/oauth2 v0.25.0 → [Updates: v0.27.0]
• gopkg.in/src-d/go-git.v4 v4.13.1
• gopkg.in/yaml.v3 v3.0.1
• helm.sh/helm/v3 v3.16.4 → [Updates: v3.18.5]
• oras.land/oras-go/v2 v2.5.0 → [Updates: v2.6.0]

regex (1)

images/builder/Dockerfile (5)

• lycheeverse/lychee v0.15.1
• golangci/golangci-lint v2.7.2
• debian_11/skopeo 1.2.2+dfsg1-1+b6
• adrienverge/yamllint v1.37.1
• opt-nc/yamlfixer 0.9.15