Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Note

These dependencies have not received updates for an extended period and may be unmaintained:

View abandoned dependencies (34)

Datasource	Name	Last Updated
github-actions	arduino/setup-task	2024-02-06
gomod	github.com/Masterminds/sprig/v3	2024-08-29
gomod	github.com/cloudflare/cfssl	2024-03-05
gomod	github.com/distribution/reference	2024-03-20
gomod	github.com/drone/envsubst	2021-06-16
gomod	github.com/ghodss/yaml	2017-03-27
gomod	github.com/go-logr/zapr	2023-11-03
gomod	github.com/golang/mock	2022-05-12
gomod	github.com/google/uuid	2024-01-23
gomod	github.com/hashicorp/go-multierror	2021-03-11
gomod	github.com/mandelsoft/filepath	2024-02-23
gomod	github.com/mandelsoft/vfs	2024-10-14
gomod	github.com/opencontainers/go-digest	2020-05-14
gomod	github.com/pkg/errors	2020-01-14
gomod	github.com/robfig/cron/v3	2020-01-04
gomod	github.com/sirupsen/logrus	2023-05-21
gomod	github.com/xeipuuv/gojsonschema	2019-10-15
gomod	golang.org/x/lint	2024-11-12
gomod	gopkg.in/yaml.v3	2022-05-27
regex	golang/mock	2021-06-11

Packages are marked as abandoned when they exceed the abandonmentThreshold since their last release.
Unlike deprecated packages with official notices, abandonment is detected by release inactivity.

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): update actions/checkout digest to 8e8c483
• chore(deps): update gcr.io/distroless/static-debian12:nonroot docker digest to 2b7c93f
• chore(deps): update hack/common digest to 4159ec6
• chore(deps): update softprops/action-gh-release digest to a06a81a
• chore(deps): update dependency go to v1.25.5
• fix(deps): update all patch dependencies (github.com/google/go-containerregistry, github.com/spf13/cobra)
• chore(deps): update dependency golangci/golangci-lint to v2.7.1
• chore(deps): update dependency open-component-model/ocm to v0.34.1
• fix(deps): update module ocm.software/ocm to v0.34.1
• fix(deps): update module github.com/docker/cli to v29
• Click on this checkbox to rebase all open PRs at once

Ignored or Blocked

The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.

• fix(deps): update module github.com/containerd/containerd to v2
• fix(deps): update module github.com/onsi/ginkgo to v2
• fix(deps): update module helm.sh/helm/v3 to v4

Detected dependencies

dockerfile

Dockerfile

• gcr.io/distroless/static-debian12 nonroot@sha256:e8a4044e0b4ae4257efa45fc026c0bc30ad320d43bd4c1a7d5271bd241e386d0

git-submodules

.gitmodules

• hack/common fd459562ab648645db4c65bfeff36238025d5d97

github-actions

.github/workflows/ci.yaml

• actions/checkout v6@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3
• actions/setup-go v6@4dc6199c7b1a012772edbd06daecab0f50c9053c

.github/workflows/integration_test_main.yaml

• actions/checkout v6@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3
• actions/setup-go v6@4dc6199c7b1a012772edbd06daecab0f50c9053c
• arduino/setup-task v2

.github/workflows/integration_test_pr.yaml

• actions/checkout v6@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3
• actions/setup-go v6@4dc6199c7b1a012772edbd06daecab0f50c9053c

.github/workflows/publish.yaml

• actions/create-github-app-token v2@7e473efe3cb98aa54f8d4bac15400b15fad77d94
• actions/checkout v6@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3
• docker/setup-qemu-action v3@c7c53464625b32c7a7e944ae62b3e17d2b600130
• docker/login-action v3@5e57cd118135c172c3672efd75eb46360885c0ef
• docker/setup-buildx-action v3@e468171a9de216ec08956ac3ada2f0791b6bd435
• actions/setup-go v6@4dc6199c7b1a012772edbd06daecab0f50c9053c

.github/workflows/release.yaml

• actions/create-github-app-token v2@7e473efe3cb98aa54f8d4bac15400b15fad77d94
• actions/checkout v6@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3
• softprops/action-gh-release v2@5be0e66d93ac7ed76da52eca8bb058f665c3a5fe

.github/workflows/reuse.yaml

• openmcp-project/build main

.github/workflows/validate-pr-content.yaml

• openmcp-project/build main

gomod

apis/go.mod

• go 1.25.4
• github.com/onsi/ginkgo/v2 v2.27.2
• github.com/onsi/gomega v1.38.2
• github.com/robfig/cron/v3 v3.0.1
• k8s.io/api v0.34.2
• k8s.io/apiextensions-apiserver v0.34.2
• k8s.io/apimachinery v0.34.2
• k8s.io/client-go v0.34.2
• k8s.io/kube-openapi v0.0.0-20251125145642-4e65d59e963e@4e65d59e963e
• k8s.io/utils v0.0.0-20251002143259-bc988d571ff4@bc988d571ff4
• sigs.k8s.io/yaml v1.6.0

controller-utils/go.mod

• go 1.25.4
• github.com/go-logr/logr v1.4.3
• github.com/go-logr/zapr v1.3.0
• github.com/golang/mock v1.6.0
• github.com/onsi/ginkgo/v2 v2.27.2
• github.com/onsi/gomega v1.38.2
• github.com/pkg/errors v0.9.1
• github.com/spf13/pflag v1.0.10
• go.uber.org/zap v1.27.1
• golang.org/x/crypto v0.45.0
• k8s.io/api v0.34.2
• k8s.io/apiextensions-apiserver v0.34.2
• k8s.io/apimachinery v0.34.2
• k8s.io/client-go v0.34.2
• sigs.k8s.io/controller-runtime v0.22.4
• sigs.k8s.io/yaml v1.6.0

go.mod

• go 1.25.4
• dario.cat/mergo v1.0.2
• github.com/Masterminds/sprig/v3 v3.3.0
• github.com/cloudflare/cfssl v1.6.5
• github.com/distribution/reference v0.6.0
• github.com/docker/cli v28.5.2+incompatible
• github.com/go-logr/logr v1.4.3
• github.com/golang/mock v1.7.0-rc.1
• github.com/google/uuid v1.6.0
• github.com/hashicorp/go-multierror v1.1.1
• github.com/mandelsoft/filepath v0.0.0-20240223090642-3e2777258aa3@3e2777258aa3
• github.com/mandelsoft/goutils v0.0.0-20251119213939-8b151b4e6ff4@8b151b4e6ff4
• github.com/mandelsoft/spiff v1.7.0-beta-7
• github.com/mandelsoft/vfs v0.4.5-0.20250514111339-d7b067920e91@d7b067920e91
• github.com/onsi/ginkgo/v2 v2.27.2
• github.com/onsi/gomega v1.38.2
• github.com/opencontainers/go-digest v1.0.0
• github.com/opencontainers/image-spec v1.1.1
• github.com/pkg/errors v0.9.1
• github.com/prometheus/client_golang v1.23.2
• github.com/robfig/cron/v3 v3.0.1
• github.com/shirou/gopsutil/v4 v4.25.11
• github.com/spf13/cobra v1.10.1
• github.com/spf13/pflag v1.0.10
• github.com/xeipuuv/gojsonschema v1.2.0
• golang.org/x/crypto v0.45.0
• golang.org/x/sync v0.18.0
• golang.org/x/sys v0.38.0
• gopkg.in/yaml.v3 v3.0.1
• helm.sh/helm/v3 v3.19.2
• k8s.io/api v0.34.2
• k8s.io/apiextensions-apiserver v0.34.2
• k8s.io/apimachinery v0.34.2
• k8s.io/client-go v0.34.2
• k8s.io/code-generator v0.34.2
• k8s.io/utils v0.0.0-20251002143259-bc988d571ff4@bc988d571ff4
• ocm.software/ocm v0.33.0
• sigs.k8s.io/controller-runtime v0.22.4
• sigs.k8s.io/yaml v1.6.0
• github.com/ThalesGroup/crypto11 v1.6.0

legacy-component-cli/go.mod

• go 1.25.4
• github.com/containerd/containerd v1.7.29
• github.com/distribution/reference v0.6.0
• github.com/docker/cli v28.5.2+incompatible
• github.com/drone/envsubst v1.0.3
• github.com/ghodss/yaml v1.0.0
• github.com/go-logr/logr v1.4.3
• github.com/go-logr/zapr v1.3.0
• github.com/golang/mock v1.6.0
• github.com/google/go-containerregistry v0.20.6
• github.com/google/uuid v1.6.0
• github.com/mandelsoft/vfs v0.4.4
• github.com/onsi/ginkgo v1.16.5
• github.com/onsi/ginkgo/v2 v2.27.2
• github.com/onsi/gomega v1.38.2
• github.com/opencontainers/distribution-spec/specs-go v0.0.0-20251113233350-e612a6e1e1bc@e612a6e1e1bc
• github.com/opencontainers/go-digest v1.0.0
• github.com/opencontainers/image-spec v1.1.1
• github.com/prometheus/client_golang v1.23.2
• github.com/sirupsen/logrus v1.9.3
• github.com/spf13/cobra v1.10.1
• github.com/spf13/pflag v1.0.10
• go.uber.org/zap v1.27.1
• golang.org/x/crypto v0.45.0
• k8s.io/api v0.34.2
• k8s.io/apimachinery v0.34.2
• sigs.k8s.io/yaml v1.6.0

legacy-component-spec/bindings-go/go.mod

• go 1.25.4
• github.com/ghodss/yaml v1.0.0
• github.com/go-logr/logr v1.4.3
• github.com/mandelsoft/vfs v0.4.4
• github.com/onsi/ginkgo v1.16.5
• github.com/onsi/ginkgo/v2 v2.27.2
• github.com/onsi/gomega v1.38.2
• github.com/opencontainers/go-digest v1.0.0
• github.com/opencontainers/image-spec v1.1.1
• github.com/xeipuuv/gojsonschema v1.2.0
• golang.org/x/lint v0.0.0-20241112194109-818c5a804067@818c5a804067
• k8s.io/apimachinery v0.34.2
• k8s.io/code-generator v0.34.2
• sigs.k8s.io/yaml v1.6.0

legacy-image-vector/go.mod

• go 1.25.4
• github.com/Masterminds/semver/v3 v3.4.0
• github.com/go-logr/logr v1.4.3
• github.com/onsi/ginkgo/v2 v2.27.2
• github.com/onsi/gomega v1.38.2
• github.com/opencontainers/go-digest v1.0.0
• github.com/opencontainers/image-spec v1.1.1
• sigs.k8s.io/yaml v1.6.0

helm-values

docs/guided-tour/components/helm-chart/chart/echo-server/values.yaml

• hashicorp/http-echo 1.0.0@sha256:fcb75f691c8b0414d670ae570240cbf95502cc18a9ba57e982ecac589760a186

docs/proposals/generation-command/01-single-helm/chart/echo-server/values.yaml

• hashicorp/http-echo 1.0.0@sha256:fcb75f691c8b0414d670ae570240cbf95502cc18a9ba57e982ecac589760a186

docs/proposals/generation-command/02-double-helm/chart/echo-server-extended/values.yaml

• hashicorp/http-echo 1.0.0@sha256:fcb75f691c8b0414d670ae570240cbf95502cc18a9ba57e982ecac589760a186

helmv3

charts/landscaper/Chart.yaml

pkg/deployer/helm/testdata/testchart5/Chart.yaml

regex

Makefile

• kubernetes-sigs/controller-tools v0.19.0
• golang/tools v0.39.0
• golangci/golangci-lint v2.6.2
• elastic/crd-ref-docs v0.2.0
• jqlang/jq v1.7.1
• open-component-model/ocm v0.33.0
• golang/mock v1.6.0
• distribution/distribution v3.0.0-alpha.1

---

• Check this box to trigger a request for Renovate to run again on this repository