Dependency Dashboard

[cq-bot]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Awaiting Schedule

These updates are awaiting their schedule. Click on a checkbox to get an update now.

• fix(deps): Update module github.com/klauspost/compress to v1.18.2
• fix(deps): Update python Docker tag to v3.13.6
• fix(deps): Update alpine Docker tag to v3.23
• fix(deps): Update dependency bazel to v7.7.1
• fix(deps): Update dependency bazel_gazelle to v0.47.0
• fix(deps): Update dependency bazel_skylib to v1.9.0
• fix(deps): Update dependency gazelle to v0.47.0
• fix(deps): Update dependency io_bazel_rules_go to v0.59.0
• fix(deps): Update dependency rules_cc to v0.2.16
• fix(deps): Update dependency rules_go to v0.59.0
• fix(deps): Update dependency rules_java to v7.12.5
• fix(deps): Update dependency rules_python to v0.40.0
• fix(deps): Update golang Docker tag to v1.25
• fix(deps): Update golangci/golangci-lint Docker tag to v1.64.8
• fix(deps): Update module github.com/opencontainers/image-spec to v1.1.1
• fix(deps): Update module github.com/redis/go-redis/extra/redisotel/v9 to v9.17.2
• fix(deps): Update module github.com/redis/go-redis/v9 to v9.17.2
• fix(deps): Update module github.com/spf13/cobra to v1.10.2
• fix(deps): Update module golang.org/x/crypto to v0.46.0
• fix(deps): Update module golang.org/x/net to v0.48.0
• fix(deps): Update module golang.org/x/oauth2 to v0.34.0
• fix(deps): Update opentelemetry-go monorepo to v1.39.0 (go.opentelemetry.io/otel, go.opentelemetry.io/otel/sdk)
• fix(deps): Update opentelemetry-go-contrib monorepo to v0.64.0 (go.opentelemetry.io/contrib/exporters/autoexport, go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp)
• fix(deps): Update otel/weaver Docker tag to v0.20.0
• fix(deps): Update protobuf monorepo (com_google_protobuf, protobuf)
• fix(deps): Update psampaz/go-mod-outdated Docker tag to v0.9.0
• fix(deps): Update redis Docker tag to v7.4
• fix(deps): Update tonistiigi/xx Docker tag to v1.9.0
• chore(deps): Update actions/checkout action to v6
• chore(deps): Update actions/configure-pages action to v5
• chore(deps): Update actions/labeler action to v6
• chore(deps): Update actions/setup-go action to v6
• chore(deps): Update actions/upload-artifact action to v6
• chore(deps): Update actions/upload-pages-artifact action to v4
• chore(deps): Update codecov/codecov-action action to v5
• chore(deps): Update docker/bake-action action to v6
• chore(deps): Update fossa-contrib/fossa-action action to v3
• chore(deps): Update github/codeql-action action to v4
• chore(deps): Update peter-evans/dockerhub-description action to v5
• chore(deps): Update softprops/action-gh-release action to v2
• fix(deps): Update dependency bazel to v8
• fix(deps): Update dependency rules_java to v9
• fix(deps): Update dependency rules_proto to v7.1.0
• fix(deps): Update dependency rules_python to v1
• fix(deps): Update gcr.io/cloud-builders/bazel Docker tag to v8
• fix(deps): Update golangci/golangci-lint Docker tag to v2
• fix(deps): Update module github.com/go-jose/go-jose/v3 to v4
• fix(deps): Update module gopkg.in/yaml.v2 to v3
• fix(deps): Update protobuf monorepo to v33 (major) (com_google_protobuf, protobuf)
• fix(deps): Update redis Docker tag to v8
• fix(deps): Update resource Microsoft.Compute/virtualMachines to 2025-04-01
• fix(deps): Update resource Microsoft.ContainerRegistry/registries to 2025-11-01
• fix(deps): Update resource Microsoft.ContainerService/managedClusters to 2025-09-01
• fix(deps): Update resource Microsoft.ManagedIdentity/userAssignedIdentities to 2024-11-30
• fix(deps): Update resource Microsoft.Network/networkInterfaces to 2025-01-01
• fix(deps): Update resource Microsoft.Network/networkSecurityGroups to 2025-01-01
• fix(deps): Update resource Microsoft.Network/publicIPAddresses to 2025-01-01
• fix(deps): Update resource Microsoft.Network/virtualNetworks to 2025-01-01
• fix(deps): Update resource Microsoft.Storage/storageAccounts to 2025-06-01
• fix(deps): Update resource Microsoft.Web/serverfarms to 2025-03-01
• fix(deps): Update resource Microsoft.Web/sites to 2025-03-01
• fix(deps): Update ubuntu Docker tag to v24

Open

These updates have all been created already. Click a checkbox below to force a retry/rebase of any.

• fix(deps): Update com_github_gflags_gflags digest to 5319350
• fix(deps): Update com_google_glog digest to 53d58e4
• fix(deps): Update com_google_googleapis digest to 60f1e6a
• fix(deps): Update python:3.13.3-slim-bullseye Docker digest to f0acec6
• chore(deps): Update github-actions (actions/checkout, github/codeql-action)
• fix(deps): Update dependency googleapis to v0.0.0-20251211-05f65958
• fix(deps): Update module github.com/Azure/azure-sdk-for-go/sdk/azidentity to v1.13.1
• fix(deps): Update dependency go to v1.25.5
• fix(deps): Update module cloud.google.com/go/storage to v1.58.0
• fix(deps): Update module github.com/bshuster-repo/logrus-logstash-hook to v1.1.0
• fix(deps): Update module github.com/distribution/reference to v0.6.0
• fix(deps): Update module google.golang.org/api to v0.257.0
• fix(deps): Update module org_golang_google_grpc to v1.77.0
• Click on this checkbox to rebase all open PRs at once

Detected dependencies

bazel

vendor/cel.dev/expr/WORKSPACE

• io_bazel_rules_go v0.35.0
• bazel_gazelle v0.29.0
• rules_proto 4.0.0-3.20.0
• com_google_googleapis 4082d5e51e8481f6ccc384cacd896f4e78f19dee
• com_google_protobuf v3.21.5
• com_github_gflags_gflags 77592648e3f3be87d6c7123eb81cbad75f9aef5a
• com_google_glog 028d37889a1e80e8a07da1b8945ac706259e5fd8
• org_golang_google_grpc v1.49.0

bazel-module

vendor/cel.dev/expr/MODULE.bazel

• bazel_skylib 1.7.1
• gazelle 0.39.1
• googleapis 0.0.0-20241220-5e258e33.bcr.1
• googleapis-cc 1.0.0
• googleapis-java 1.0.0
• googleapis-go 1.0.0
• protobuf 27.0
• rules_cc 0.0.17
• rules_go 0.53.0
• rules_java 7.6.5
• rules_proto 7.0.2
• rules_python 0.35.0

bazelisk

vendor/cel.dev/expr/.bazelversion

• bazel 7.3.2

bicep

vendor/github.com/Azure/azure-sdk-for-go/sdk/azidentity/test-resources.bicep

• Microsoft.Storage/storageAccounts 2021-08-01
• Microsoft.Storage/storageAccounts 2021-08-01
• Microsoft.ManagedIdentity/userAssignedIdentities 2018-11-30
• Microsoft.Authorization/roleAssignments 2022-04-01
• Microsoft.Authorization/roleAssignments 2022-04-01
• Microsoft.Authorization/roleAssignments 2022-04-01
• Microsoft.Authorization/roleAssignments 2022-04-01
• Microsoft.Authorization/roleAssignments 2022-04-01
• Microsoft.ContainerRegistry/registries 2023-01-01-preview
• Microsoft.Web/serverfarms 2021-03-01
• Microsoft.Web/sites 2021-03-01
• Microsoft.ContainerService/managedClusters 2023-06-01
• Microsoft.Network/publicIPAddresses 2023-05-01
• Microsoft.Network/networkSecurityGroups 2024-07-01
• Microsoft.Network/virtualNetworks 2024-07-01
• Microsoft.Network/networkInterfaces 2024-07-01
• Microsoft.Compute/virtualMachines 2024-07-01

cloudbuild

vendor/cel.dev/expr/cloudbuild.yaml

• gcr.io/cloud-builders/bazel 7.3.2

docker-compose

tests/docker-compose-e2e-cloud-storage.yml

• redis 7.2-alpine

tests/docker-compose-storage.yml

dockerfile

Dockerfile

• docker/dockerfile 1
• tonistiigi/xx 1.2.1
• golang 1.23-alpine3.22
• alpine 3.22

dockerfiles/authors.Dockerfile

• docker/dockerfile 1
• alpine 3.22

dockerfiles/docs.Dockerfile

• docker/dockerfile 1
• golang 1.23-alpine3.19
• wjdp/htmltest v0.17.0

dockerfiles/git.Dockerfile

• docker/dockerfile 1
• alpine 3.22
• golang 1.23-alpine3.22

dockerfiles/lint.Dockerfile

• docker/dockerfile 1
• golangci/golangci-lint v1.55.2-alpine
• golang 1.23-alpine3.19

dockerfiles/vendor.Dockerfile

• docker/dockerfile 1
• golang 1.23-alpine3.19
• psampaz/go-mod-outdated v0.8.0

project/dev-image/Dockerfile

• ubuntu 14.04.5

vendor/go.opentelemetry.io/otel/dependencies.Dockerfile

• python 3.13.3-slim-bullseye@sha256:9e3f9243e06fd68eb9519074b49878eda20ad39a855fac51aaffb741de20726e
• otel/weaver v0.15.0@sha256:1cf1c72eaed57dad813c2e359133b8a15bd4facf305aae5b13bdca6d3eccff56
• avtodev/markdown-lint v1@sha256:6aeedc2f49138ce7a1cd0adffc1b1c0321b841dc2102408967d9301c031949ee

github-actions

.github/workflows/build.yml

• actions/checkout v4
• actions/setup-go v5
• codecov/codecov-action v3
• actions/checkout v4
• docker/metadata-action v5
• docker/setup-buildx-action v3
• docker/login-action v3
• docker/login-action v3
• docker/bake-action v4
• actions/upload-artifact v4.6.2
• docker/bake-action v4
• softprops/action-gh-release v1

.github/workflows/codeql-analysis.yml

• actions/checkout v4
• github/codeql-action v3.31.0
• github/codeql-action v3.31.0
• github/codeql-action v3.31.0

.github/workflows/conformance.yml

• actions/checkout v4
• docker/setup-buildx-action v3
• docker/bake-action v6
• opencontainers/distribution-spec v1.1.1
• actions/upload-artifact v4.6.2

.github/workflows/dockerhub-readme.yml

• actions/checkout v4
• peter-evans/dockerhub-description v3

.github/workflows/docs.yml

• actions/checkout v4
• actions/configure-pages v4
• docker/setup-buildx-action v3
• docker/bake-action v4
• actions/upload-pages-artifact v3
• actions/deploy-pages v4

.github/workflows/e2e.yml

• actions/checkout v5
• docker/setup-buildx-action v3
• docker/bake-action v6
• actions/checkout v5

.github/workflows/fossa.yml

• actions/checkout v4
• fossa-contrib/fossa-action v2

.github/workflows/label.yaml

• actions/labeler v5

.github/workflows/scorecards.yml

• actions/checkout v4.3.0@08eba0b27e820071cde6df949e0beb9ba4906955
• ossf/scorecard-action v2.4.3@4eaacf0543bb3f2c246792bd56e8cdeffafb205a
• actions/upload-artifact v4.6.2@ea165f8d65b6e75b540449e92b4886f43607fa02
• github/codeql-action v2.28.1@b8d3b6e8af63cde30bdc382c0bc28114f4346c88

.github/workflows/validate.yml

• actions/checkout v4

gomod

go.mod

• go 1.24.0
• go 1.24.10
• cloud.google.com/go/storage v1.57.1
• github.com/AdaLogics/go-fuzz-headers v0.0.0-20240806141605-e8a1dd7889d6@e8a1dd7889d6
• github.com/Azure/azure-sdk-for-go/sdk/azcore v1.20.0
• github.com/Azure/azure-sdk-for-go/sdk/azidentity v1.13.0
• github.com/Azure/azure-sdk-for-go/sdk/storage/azblob v1.6.3
• github.com/aws/aws-sdk-go v1.55.8
• github.com/bshuster-repo/logrus-logstash-hook v1.0.0
• github.com/coreos/go-systemd/v22 v22.6.0
• github.com/distribution/reference v0.5.0
• github.com/docker/go-events v0.0.0-20250808211157-605354379745@605354379745
• github.com/docker/go-metrics v0.0.1
• github.com/go-jose/go-jose/v3 v3.0.4
• github.com/google/uuid v1.6.0
• github.com/gorilla/handlers v1.5.2
• github.com/gorilla/mux v1.8.1
• github.com/hashicorp/golang-lru/arc/v2 v2.0.7
• github.com/klauspost/compress v1.18.1
• github.com/mitchellh/mapstructure v1.5.0
• github.com/opencontainers/go-digest v1.0.0
• github.com/opencontainers/image-spec v1.0.2
• github.com/redis/go-redis/extra/redisotel/v9 v9.0.5
• github.com/redis/go-redis/v9 v9.1.0
• github.com/sirupsen/logrus v1.9.3
• github.com/spf13/cobra v1.8.0
• github.com/stretchr/testify v1.11.1
• go.opentelemetry.io/contrib/exporters/autoexport v0.46.1
• go.opentelemetry.io/otel/sdk v1.36.0
• golang.org/x/crypto v0.45.0
• golang.org/x/oauth2 v0.30.0
• google.golang.org/api v0.247.0
• gopkg.in/yaml.v2 v2.4.0
• go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.61.0
• go.opentelemetry.io/otel v1.36.0
• golang.org/x/net v0.47.0

npm

vendor/github.com/redis/go-redis/v9/package.json

pip_requirements

vendor/go.opentelemetry.io/otel/requirements.txt

• codespell ==2.4.1

renovate-config-presets

renovate.json