Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Config Migration Needed

• Select this checkbox to let Renovate create an automated Config Migration PR.

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): update actions/stale digest to dcd2b94
• chore(deps): update anchore/sbom-action digest to 5620efe
• chore(deps): update github/codeql-action digest to ab5b0e3
• fix(deps): update google.golang.org/genproto digest to ce8ad4c
• fix(deps): update google.golang.org/genproto/googleapis/rpc digest to ce8ad4c
• chore(deps): update all-ci-dependencies (actions/checkout, openbao)
• fix(deps): update module github.com/onsi/gomega to v1.39.1
• fix(deps): update module sigs.k8s.io/controller-runtime to v0.23.1
• fix(deps): update module cloud.google.com/go/kms to v1.25.0
• fix(deps): update module github.com/onsi/ginkgo/v2 to v2.28.1
• fix(deps): update module google.golang.org/api to v0.264.0
• Click on this checkbox to rebase all open PRs at once

PR Closed (Blocked)

The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.

• chore(deps): update sigstore/cosign-installer action to v4

Detected Dependencies

dockerfile (1)

Dockerfile.base (1)

• docker.io/library/alpine 3.23

flux (1)

e2e/manifests/distro/openbao.flux.yaml (1)

• openbao 0.23.3 → [Updates: 0.23.5]

github-actions (13)

.github/workflows/check-actions.yaml (2)

• actions/checkout v6.0.1@8e8c483db84b4bee98b60c0593521ed34d9990e8 → [Updates: v6.0.2]
• zgosalvez/github-actions-ensure-sha-pinned-actions v4.0.1@6124774845927d14c601359ab8138699fa5b70c3

.github/workflows/check-commit.yml (3)

• actions/checkout v6.0.1@8e8c483db84b4bee98b60c0593521ed34d9990e8 → [Updates: v6.0.2]
• wagoid/commitlint-github-action v6.2.1@b948419dd99f3fd78a6548d48f94e3df7f6bf3ed
• ubuntu 24.04

.github/workflows/check-pr.yml (1)

• amannn/action-semantic-pull-request b439535a8eb2122b748ed2b45d1693aaabe5b0aa

.github/workflows/coverage.yml (9)

• actions/checkout v6.0.1@8e8c483db84b4bee98b60c0593521ed34d9990e8 → [Updates: v6.0.2]
• actions/setup-go v6.2.0@7a3fe6cf4cb3a834922a1244abfce67bcef6a0c5
• securego/gosec v2.22.11@424fc4cd9c82ea0fd6bee9cd49c2db2c3cc0c93f
• github/codeql-action 32d41f36fe7c3d2125b2ef434749e8f445ec42cf → [Updates: undefined]
• actions/checkout v6.0.1@8e8c483db84b4bee98b60c0593521ed34d9990e8 → [Updates: v6.0.2]
• actions/setup-go v6.2.0@7a3fe6cf4cb3a834922a1244abfce67bcef6a0c5
• codecov/codecov-action v5.5.2@671740ac38dd9b0130fbe1cec585b89eea48d3de
• ubuntu 24.04
• ubuntu 24.04

.github/workflows/docker-build.yml (5)

• actions/checkout v6.0.1@8e8c483db84b4bee98b60c0593521ed34d9990e8 → [Updates: v6.0.2]
• docker/setup-qemu-action v3.7.0@c7c53464625b32c7a7e944ae62b3e17d2b600130
• docker/setup-buildx-action v3.12.0@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f
• aquasecurity/trivy-action 0.33.1@b6643a29fecd7f34b3597bc6acb0a98b03d33ff8
• github/codeql-action 32d41f36fe7c3d2125b2ef434749e8f445ec42cf → [Updates: undefined]

.github/workflows/docker-publish.yml (6)

• actions/checkout v6.0.1@8e8c483db84b4bee98b60c0593521ed34d9990e8 → [Updates: v6.0.2]
• sigstore/cosign-installer v4.0.0@faadad0cce49287aee09b3a48701e75088a2c6ad
• docker/setup-qemu-action v3.7.0@c7c53464625b32c7a7e944ae62b3e17d2b600130
• docker/setup-buildx-action v3.12.0@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f
• peak-scale/github-actions v0.2.0@a441cca016861c546ab7e065277e40ce41a3eb84
• slsa-framework/slsa-github-generator v2.1.0

.github/workflows/e2e.yaml (4)

• actions/checkout v6.0.1@8e8c483db84b4bee98b60c0593521ed34d9990e8 → [Updates: v6.0.2]
• actions/setup-go v6.2.0@7a3fe6cf4cb3a834922a1244abfce67bcef6a0c5
• azure/setup-helm v4@1a275c3b69536ee54be43f2070a358922e12c8d4
• ubuntu 24.04

.github/workflows/gosec.yaml (5)

• actions/checkout v6.0.1@8e8c483db84b4bee98b60c0593521ed34d9990e8 → [Updates: v6.0.2]
• actions/setup-go v6.2.0@7a3fe6cf4cb3a834922a1244abfce67bcef6a0c5
• securego/gosec v2.22.11@424fc4cd9c82ea0fd6bee9cd49c2db2c3cc0c93f
• github/codeql-action 32d41f36fe7c3d2125b2ef434749e8f445ec42cf → [Updates: undefined]
• ubuntu 24.04

.github/workflows/helm-publish.yml (5)

• actions/checkout v6.0.1@8e8c483db84b4bee98b60c0593521ed34d9990e8 → [Updates: v6.0.2]
• sigstore/cosign-installer v4.0.0@faadad0cce49287aee09b3a48701e75088a2c6ad
• peak-scale/github-actions v0.2.0@a441cca016861c546ab7e065277e40ce41a3eb84
• slsa-framework/slsa-github-generator v2.1.0
• ubuntu 24.04

.github/workflows/helm-test.yml (4)

• actions/checkout v6.0.1@8e8c483db84b4bee98b60c0593521ed34d9990e8 → [Updates: v6.0.2]
• actions/checkout v6.0.1@8e8c483db84b4bee98b60c0593521ed34d9990e8 → [Updates: v6.0.2]
• azure/setup-helm v4@1a275c3b69536ee54be43f2070a358922e12c8d4
• ubuntu 24.04

.github/workflows/lint.yaml (8)

• actions/checkout v6.0.1@8e8c483db84b4bee98b60c0593521ed34d9990e8 → [Updates: v6.0.2]
• actions/setup-go v6.2.0@7a3fe6cf4cb3a834922a1244abfce67bcef6a0c5
• actions/checkout v6.0.1@8e8c483db84b4bee98b60c0593521ed34d9990e8 → [Updates: v6.0.2]
• actions/checkout v6.0.1@8e8c483db84b4bee98b60c0593521ed34d9990e8 → [Updates: v6.0.2]
• actions/setup-go v6.2.0@7a3fe6cf4cb3a834922a1244abfce67bcef6a0c5
• ubuntu 24.04
• ubuntu 24.04
• ubuntu 24.04

.github/workflows/releaser.yml (5)

• actions/checkout v6.0.1@8e8c483db84b4bee98b60c0593521ed34d9990e8 → [Updates: v6.0.2]
• creekorful/goreportcard-action v1.0@1f35ced8cdac2cba28c9a2f2288a16aacfd507f9
• anchore/sbom-action 28b3d8f2b71b40601dd12716315d3de4e7f4a325 → [Updates: undefined]
• sigstore/cosign-installer v3.10.1@7e8b541eb2e61bf99390e1afd4be13a184e9ebc5 → [Updates: v4.0.0]
• goreleaser/goreleaser-action v6.4.0@e435ccd777264be153ace6237001ef4d979d3a7a

.github/workflows/stale.yml (1)

• actions/stale a21a0816299b11691f9592ef0d63d08e02f06d9d → [Updates: undefined]

gomod (1)

go.mod (35)

• go 1.25.4
• cloud.google.com/go/kms v1.24.0 → [Updates: v1.25.0]
• filippo.io/age v1.3.1
• github.com/AdaLogics/go-fuzz-headers v0.0.0-20240806141605-e8a1dd7889d6@e8a1dd7889d6
• github.com/Azure/azure-sdk-for-go/sdk/azcore v1.21.0
• github.com/Azure/azure-sdk-for-go/sdk/azidentity v1.13.1
• github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/azkeys v1.4.0
• github.com/aws/aws-sdk-go v1.55.8
• github.com/aws/aws-sdk-go-v2 v1.41.1
• github.com/aws/aws-sdk-go-v2/config v1.32.7
• github.com/aws/aws-sdk-go-v2/credentials v1.19.7
• github.com/aws/aws-sdk-go-v2/service/kms v1.49.5
• github.com/aws/aws-sdk-go-v2/service/sts v1.41.6
• github.com/dimchansky/utfbom v1.1.1
• github.com/getsops/sops/v3 v3.11.0
• github.com/go-logr/logr v1.4.3
• github.com/hashicorp/vault/api v1.22.0
• github.com/onsi/ginkgo/v2 v2.27.3 → [Updates: v2.28.1]
• github.com/onsi/gomega v1.39.0 → [Updates: v1.39.1]
• github.com/ory/dockertest/v3 v3.12.0
• github.com/prometheus/client_golang v1.23.2
• github.com/stretchr/testify v1.11.1
• golang.org/x/net v0.49.0
• google.golang.org/api v0.260.0 → [Updates: v0.264.0]
• google.golang.org/genproto v0.0.0-20251222181119-0a764e51fe1b@0a764e51fe1b → [Updates: v0.0.0-20260202165425-ce8ad4cf556b]
• google.golang.org/genproto/googleapis/rpc v0.0.0-20260120221211-b8f7ae30c516@b8f7ae30c516 → [Updates: v0.0.0-20260202165425-ce8ad4cf556b]
• google.golang.org/grpc v1.78.0
• google.golang.org/protobuf v1.36.11
• k8s.io/api v0.35.0
• k8s.io/apimachinery v0.35.0
• k8s.io/client-go v0.35.0
• k8s.io/kubectl v0.35.0
• k8s.io/utils v0.0.0-20260108192941-914a6e750570@914a6e750570
• sigs.k8s.io/controller-runtime v0.23.0 → [Updates: v0.23.1]
• sigs.k8s.io/yaml v1.6.0

helm-values (1)

charts/sops-operator/values.yaml

regex (2)

.pre-commit-config.yaml (3)

• alessandrojcm/commitlint-pre-commit-hook v9.24.0
• pre-commit/pre-commit-hooks v6.0.0
• adrienverge/yamllint v1.38.0

Makefile (11)

• norwoodj/helm-docs v1.35.0
• kubernetes-sigs/controller-tools v0.20.0
• B1NARY-GR0UP/nwa v0.7.7
• helm/chart-testing v3.14.0
• kubernetes-sigs/kind v0.31.0
• openbao/openbao v2.4.4
• google/ko v0.18.1
• golangci/golangci-lint v2.8.0
• fybrik/crdoc v0.6.4
• FiloSottile/age v1.3.1
• getsops/sops v3.11.0

---

• Check this box to trigger a request for Renovate to run again on this repository