Dependency Dashboard

[renovate-sh-app]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Repository Problems

Renovate tried to run on this repository, but found these problems.

• ⚠️ WARN: Package lookup failures

Abandoned Dependencies

Note

Packages are marked as abandoned when they exceed the abandonmentThreshold since their last release. Unlike deprecated packages with official notices, abandonment is detected by release inactivity.

These dependencies have not received updates for an extended period and may be unmaintained:

View abandoned dependencies (18)

Datasource	Package	Last Updated
gomod	github.com/Dieterbe/artisanalhistogram	2021-03-30
gomod	github.com/Dieterbe/go-metrics	2018-10-15
gomod	github.com/Dieterbe/topic	2014-12-09
gomod	github.com/cespare/xxhash/v2	2024-04-04
gomod	github.com/dgryski/go-linlog	2021-10-15
gomod	github.com/elazarl/go-bindata-assetfs	2020-05-09
gomod	github.com/golang/snappy	2023-12-25
gomod	github.com/google/go-cmp	2025-01-14
gomod	github.com/gorilla/handlers	2023-10-18
gomod	github.com/gorilla/mux	2023-10-18
gomod	github.com/grafana/metrictank	2021-01-14
gomod	github.com/jpillora/backoff	2019-10-03
gomod	github.com/kisielk/og-rek	2025-02-20
gomod	github.com/metrics20/go-metrics20	2024-02-16
gomod	github.com/raintank/dur	2022-01-06
gomod	github.com/streadway/amqp	2023-06-19
gomod	github.com/taylorchu/toki	2024-09-27
gomod	github.com/xdg/scram	2022-01-16

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• chore(deps): pin grafana/security-github-actions action to e269081
• chore(deps): update alpine docker digest to 2510918
• chore(deps): update gcr.io/distroless/static-debian12 docker digest to 20bc6c0
• fix(deps): update module cloud.google.com/go/pubsub to v1.50.1
• fix(deps): update module github.com/burntsushi/toml to v0.4.1
• chore(deps): update actions/checkout action to v6
• chore(deps): update actions/setup-go action to v6
• chore(deps): update dependency ruby to v4
• chore(deps): update github artifact actions (major) (actions/download-artifact, actions/upload-artifact)
• fix(deps): update module cloud.google.com/go/pubsub to v2
• fix(deps): update module github.com/burntsushi/toml to v1
• chore(deps): lock file maintenance
• 🔐 Create all rate-limited PRs at once 🔐

---

Warning

Renovate failed to look up the following dependencies: Could not determine new digest for update (github-tags package grafana/shared-workflows).

Files affected: .github/workflows/ci.yaml

---

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): update module google.golang.org/grpc to v1.79.3 [security]
• chore(deps): update actions/setup-go digest to 7b8cf10
• chore(deps): update grafana/shared-workflows/ action to
• fix(deps): update github.com/metrics20/go-metrics20 digest to a2a3be3
• fix(deps): update github.com/taylorchu/toki digest to 36c157a
• chore(deps): update dependency ruby to v3.4.9
• chore(deps): update module github.com/cespare/xxhash/v2 to v2.3.0
• chore(deps): update ruby/setup-ruby action to v1.297.0
• fix(deps): update aws-sdk-go-v2 monorepo (github.com/aws/aws-sdk-go-v2, github.com/aws/aws-sdk-go-v2/config, github.com/aws/aws-sdk-go-v2/service/cloudwatch)
• fix(deps): update module github.com/grafana/metrictank to v1.1
• fix(deps): update module github.com/shopify/sarama to v1.47.0
• Click on this checkbox to rebase all open PRs at once

Vulnerabilities

Important

2/2 CVEs have Renovate fixes.

gomod

go.mod

google.golang.org/grpc

• GHSA-p77j-4mvh-x3m3 (fixed in >= 1.79.3)
• GO-2026-4762 (fixed in >= 1.79.3)

Detected Dependencies

dockerfile (1)

Dockerfile (2)

• alpine sha256:4b7ce07002c69e8f3d704a9c5d6fd3053be500b7f1c69fc0d80990c2ad8dd412 → [Updates: undefined]
• gcr.io/distroless/static-debian12 sha256:87bce11be0af225e4ca761c40babb06d6d559f5767fbf7dc3c47f0f1a466b92c → [Updates: undefined]

github-actions (2)

.github/workflows/ci.yaml (19)

• actions/checkout v3@f43a0e5ff2bd294095638e18286ca9a3d1956744 → [Updates: v6]
• actions/setup-go v4@19bb51245e9c80abacb2e91cc42b33fa478b8639 → [Updates: v6, v4]
• actions/checkout v3@f43a0e5ff2bd294095638e18286ca9a3d1956744 → [Updates: v6]
• actions/setup-go v4@19bb51245e9c80abacb2e91cc42b33fa478b8639 → [Updates: v6, v4]
• ruby/setup-ruby v1.235.0@dffc446db9ba5a0c4446edb5bca1c5c473a806c5 → [Updates: v1.297.0]
• actions/upload-artifact v4@ea165f8d65b6e75b540449e92b4886f43607fa02 → [Updates: v7]
• actions/checkout v3@f43a0e5ff2bd294095638e18286ca9a3d1956744 → [Updates: v6]
• actions/download-artifact v4@d3f86a106a0bac45b974a628896c90dbdf5c8093 → [Updates: v8]
• ruby/setup-ruby v1.235.0@dffc446db9ba5a0c4446edb5bca1c5c473a806c5 → [Updates: v1.297.0]
• grafana/shared-workflows 2d5a0678eb32b0fd6655b4f7a3a7ec72eaf530ca → [Updates: undefined]
• grafana/shared-workflows 2d5a0678eb32b0fd6655b4f7a3a7ec72eaf530ca → [Updates: undefined]
• grafana/shared-workflows v0.3.0@ef27c620a88acc9f3007f30be5e9407324e8975b
• actions/checkout v3@f43a0e5ff2bd294095638e18286ca9a3d1956744 → [Updates: v6]
• actions/setup-go v4@19bb51245e9c80abacb2e91cc42b33fa478b8639 → [Updates: v6, v4]
• go 1.25.7
• go 1.25.7
• ruby 3.3 → [Updates: 3.4.9, 4.0.2]
• ruby 3.3 → [Updates: 3.4.9, 4.0.2]
• go 1.25.7

.github/workflows/dependabot-reviewer.yml (1)

• grafana/security-github-actions main → [Updates: main]

gomod (1)

go.mod (30)

• go 1.25.7
• cloud.google.com/go/pubsub v1.49.0 → [Updates: v1.50.1, v2.5.0]
• github.com/BurntSushi/toml v0.3.1 → [Updates: v0.4.1, v1.6.0]
• github.com/Dieterbe/artisanalhistogram v0.0.0-20210330070510-f7596a8a7dbe@f7596a8a7dbe
• github.com/Dieterbe/go-metrics v0.0.0-20181015090856-87383909479d@87383909479d
• github.com/Dieterbe/topic v0.0.0-20141209014555-1850ffda9965@1850ffda9965
• github.com/Shopify/sarama v1.23.0 → [Updates: v1.47.0]
• github.com/aws/aws-sdk-go-v2 v1.36.3 → [Updates: v1.41.5]
• github.com/aws/aws-sdk-go-v2/config v1.29.14 → [Updates: v1.32.13]
• github.com/aws/aws-sdk-go-v2/service/cloudwatch v1.44.3 → [Updates: v1.55.3]
• github.com/dgryski/go-linlog v0.0.0-20211015210535-87314c522abf@87314c522abf
• github.com/elazarl/go-bindata-assetfs v1.0.1
• github.com/golang/snappy v1.0.0
• github.com/google/go-cmp v0.7.0
• github.com/gorilla/handlers v1.5.2
• github.com/gorilla/mux v1.8.1
• github.com/grafana/configparser v0.0.0-20210707122942-2593eb86a3ee@2593eb86a3ee
• github.com/grafana/metrictank v1.0.1-0.20221128152741-61182cf5f40e@61182cf5f40e → [Updates: v1.1]
• github.com/jpillora/backoff v1.0.0
• github.com/kisielk/og-rek v1.3.0
• github.com/metrics20/go-metrics20 v0.0.0-20180821133656-717ed3a27bf9@717ed3a27bf9 → [Updates: v0.0.0-20240216190837-a2a3be37ef3e]
• github.com/prometheus/procfs v0.20.1
• github.com/raintank/dur v0.0.0-20220106223125-d7c6a541ef3a@d7c6a541ef3a
• github.com/sirupsen/logrus v1.9.4
• github.com/streadway/amqp v1.1.0
• github.com/stretchr/testify v1.11.1
• github.com/taylorchu/toki v0.0.0-20141019163204-20e86122596c@20e86122596c → [Updates: v0.0.0-20240927201529-36c157adcc65]
• github.com/xdg/scram v1.0.5
• google.golang.org/grpc v1.71.0 → [Updates: v1.79.3]
• github.com/cespare/xxhash/v2 v2.1.1 → [Updates: v2.3.0]

jsonnet-bundler (1)

jsonnet/lib/carbon-relay-ng/jsonnetfile.json (1)

• github.com/grafana/jsonnet-libs/ksonnet-util main

---

Need help?

You can ask for more help in the following Slack channel: #proj-renovate-self-hosted. In that channel you can also find ADR and FAQ docs in the Resources section.