Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Config Migration Needed

• Select this checkbox to let Renovate create an automated Config Migration PR.

PR Edited (Blocked)

The following updates have been manually edited so Renovate will no longer make changes. To discard all commits and start over, click on a checkbox below.

• chore(deps): update dependency kubernetes-sigs/controller-tools to v0.20.0

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): update anchore/sbom-action digest to a930d0a
• chore(deps): update dependency google/ko to v0.18.1
• chore(deps): update dependency onsi/ginkgo to v2.27.3
• fix(deps): update module github.com/onsi/ginkgo/v2 to v2.27.3
• fix(deps): update module github.com/onsi/gomega to v1.38.3
• fix(deps): update module github.com/projectcapsule/capsule to v0.12.4
• chore(deps): update dependency golangci/golangci-lint to v2.7.2
• chore(deps): update dependency kubernetes-sigs/kind to v0.31.0
• fix(deps): update kubernetes packages to v0.35.0 (k8s.io/api, k8s.io/apiextensions-apiserver, k8s.io/apimachinery, k8s.io/apiserver, k8s.io/client-go, k8s.io/component-base, k8s.io/kubectl)
• chore(deps): update all-ci-updates (major) (actions/cache, actions/checkout, actions/upload-artifact, github/codeql-action, sigstore/cosign-installer, zgosalvez/github-actions-ensure-sha-pinned-actions)
• Click on this checkbox to rebase all open PRs at once

PR Closed (Blocked)

The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.

• fix(deps): update module github.com/thediveo/enumflag to v2

Detected Dependencies

dockerfile (1)

Dockerfile (2)

• golang 1.25
• golang 1.25

flux (3)

e2e/distro/objects/capsule.flux.yaml (1)

• capsule 0.12.4

e2e/distro/objects/cert-manager.flux.yaml

e2e/distro/objects/metrics.flux.yaml (1)

• metrics-server 3.13.0

github-actions (14)

.github/actions/setup-caches/action.yaml (2)

• actions/cache v4.3.0@0057852bfaa89a56745cba8c7296529d2fc39830 → [Updates: v5.0.1]
• actions/cache v4.3.0@0057852bfaa89a56745cba8c7296529d2fc39830 → [Updates: v5.0.1]

.github/workflows/check-actions.yml (2)

• actions/checkout v5.0.1@93cb6efe18208431cddfb8368fd83d5badbf9bfd → [Updates: v6.0.1]
• zgosalvez/github-actions-ensure-sha-pinned-actions v3.0.25@fc87bb5b5a97953d987372e74478de634726b3e5 → [Updates: v4.0.1]

.github/workflows/check-commit.yml (3)

• actions/checkout v5.0.1@93cb6efe18208431cddfb8368fd83d5badbf9bfd → [Updates: v6.0.1]
• wagoid/commitlint-github-action v6.2.1@b948419dd99f3fd78a6548d48f94e3df7f6bf3ed
• ubuntu 24.04

.github/workflows/check-pr.yml (1)

• amannn/action-semantic-pull-request 71b07ef490c9e8ef772f64a62d41545ae5b9ef22

.github/workflows/coverage.yml (13)

• actions/checkout v5.0.1@93cb6efe18208431cddfb8368fd83d5badbf9bfd → [Updates: v6.0.1]
• fossas/fossa-action v1.7.0@3ebcea1862c6ffbd5cf1b4d0bd6b3fe7bd6f2cac
• fossas/fossa-action v1.7.0@3ebcea1862c6ffbd5cf1b4d0bd6b3fe7bd6f2cac
• actions/checkout v5.0.1@93cb6efe18208431cddfb8368fd83d5badbf9bfd → [Updates: v6.0.1]
• actions/setup-go v6.1.0@4dc6199c7b1a012772edbd06daecab0f50c9053c
• securego/gosec v2.22.11@424fc4cd9c82ea0fd6bee9cd49c2db2c3cc0c93f
• github/codeql-action f67ec12472e1b361f5e1e2085f5e6f85a57e3cd6
• actions/checkout v5.0.1@93cb6efe18208431cddfb8368fd83d5badbf9bfd → [Updates: v6.0.1]
• actions/setup-go v6.1.0@4dc6199c7b1a012772edbd06daecab0f50c9053c
• codecov/codecov-action v5.5.2@671740ac38dd9b0130fbe1cec585b89eea48d3de
• ubuntu 24.04
• ubuntu 24.04
• ubuntu 24.04

.github/workflows/docker-build.yml (3)

• actions/checkout v5.0.1@93cb6efe18208431cddfb8368fd83d5badbf9bfd → [Updates: v6.0.1]
• aquasecurity/trivy-action 0.33.1@b6643a29fecd7f34b3597bc6acb0a98b03d33ff8
• github/codeql-action f67ec12472e1b361f5e1e2085f5e6f85a57e3cd6

.github/workflows/docker-publish.yml (5)

• actions/checkout v5.0.1@93cb6efe18208431cddfb8368fd83d5badbf9bfd → [Updates: v6.0.1]
• aquasecurity/trivy-action 0.33.1@b6643a29fecd7f34b3597bc6acb0a98b03d33ff8
• sigstore/cosign-installer v3.10.1@7e8b541eb2e61bf99390e1afd4be13a184e9ebc5 → [Updates: v4.0.0]
• peak-scale/github-actions v0.2.0@a441cca016861c546ab7e065277e40ce41a3eb84
• slsa-framework/slsa-github-generator v2.1.0

.github/workflows/e2e.yml (4)

• actions/checkout v5.0.1@93cb6efe18208431cddfb8368fd83d5badbf9bfd → [Updates: v6.0.1]
• actions/setup-go v6.1.0@4dc6199c7b1a012772edbd06daecab0f50c9053c
• azure/setup-helm v4@1a275c3b69536ee54be43f2070a358922e12c8d4
• ubuntu 24.04

.github/workflows/helm-publish.yml (8)

• actions/checkout v5.0.1@93cb6efe18208431cddfb8368fd83d5badbf9bfd → [Updates: v6.0.1]
• stefanprodan/helm-gh-pages v1.7.0@0ad2bb377311d61ac04ad9eb6f252fb68e207260
• actions/checkout v5.0.1@93cb6efe18208431cddfb8368fd83d5badbf9bfd → [Updates: v6.0.1]
• sigstore/cosign-installer v3.10.1@7e8b541eb2e61bf99390e1afd4be13a184e9ebc5 → [Updates: v4.0.0]
• peak-scale/github-actions a441cca016861c546ab7e065277e40ce41a3eb84
• slsa-framework/slsa-github-generator v2.1.0
• ubuntu 24.04
• ubuntu 24.04

.github/workflows/helm-test.yml (4)

• actions/checkout v5.0.1@93cb6efe18208431cddfb8368fd83d5badbf9bfd → [Updates: v6.0.1]
• actions/checkout v5.0.1@93cb6efe18208431cddfb8368fd83d5badbf9bfd → [Updates: v6.0.1]
• azure/setup-helm v4@1a275c3b69536ee54be43f2070a358922e12c8d4
• ubuntu 24.04

.github/workflows/lint.yaml (8)

• actions/checkout v5.0.1@93cb6efe18208431cddfb8368fd83d5badbf9bfd → [Updates: v6.0.1]
• actions/setup-go v6.1.0@4dc6199c7b1a012772edbd06daecab0f50c9053c
• actions/checkout v5.0.1@93cb6efe18208431cddfb8368fd83d5badbf9bfd → [Updates: v6.0.1]
• actions/checkout v5.0.1@93cb6efe18208431cddfb8368fd83d5badbf9bfd → [Updates: v6.0.1]
• actions/setup-go v6.1.0@4dc6199c7b1a012772edbd06daecab0f50c9053c
• ubuntu 24.04
• ubuntu 24.04
• ubuntu 24.04

.github/workflows/releaser.yml (5)

• actions/checkout v5.0.1@93cb6efe18208431cddfb8368fd83d5badbf9bfd → [Updates: v6.0.1]
• creekorful/goreportcard-action v1.0@1f35ced8cdac2cba28c9a2f2288a16aacfd507f9
• anchore/sbom-action 2df107d3f8e46d7d2d8d15aad8f7c679a292709a → [Updates: undefined]
• sigstore/cosign-installer v3.10.1@7e8b541eb2e61bf99390e1afd4be13a184e9ebc5 → [Updates: v4.0.0]
• goreleaser/goreleaser-action v6.4.0@e435ccd777264be153ace6237001ef4d979d3a7a

.github/workflows/scorecard.yml (4)

• actions/checkout v5.0.1@93cb6efe18208431cddfb8368fd83d5badbf9bfd → [Updates: v6.0.1]
• ossf/scorecard-action v2.4.3@4eaacf0543bb3f2c246792bd56e8cdeffafb205a
• actions/upload-artifact v4.6.2@ea165f8d65b6e75b540449e92b4886f43607fa02 → [Updates: v6.0.0]
• github/codeql-action v3.31.9@45c373516f557556c15d420e3f5e0aa3d64366bc → [Updates: v4.31.9]

.github/workflows/stale.yml (1)

• actions/stale a21a0816299b11691f9592ef0d63d08e02f06d9d

gomod (1)

go.mod (24)

• go 1.25.4
• github.com/go-logr/logr v1.4.3
• github.com/golang-jwt/jwt/v5 v5.3.0
• github.com/gorilla/handlers v1.5.2
• github.com/gorilla/mux v1.8.1
• github.com/onsi/ginkgo/v2 v2.27.2 → [Updates: v2.27.3]
• github.com/onsi/gomega v1.38.2 → [Updates: v1.38.3]
• github.com/pkg/errors v0.9.1
• github.com/projectcapsule/capsule v0.12.1 → [Updates: v0.12.4]
• github.com/prometheus/client_golang v1.23.2
• github.com/prometheus/client_model v0.6.2
• github.com/spf13/pflag v1.0.10
• github.com/thediveo/enumflag v0.10.1 → [Updates: v2.1.0]
• go.uber.org/zap v1.27.1
• golang.org/x/net v0.48.0
• k8s.io/api v0.34.2 → [Updates: v0.35.0]
• k8s.io/apiextensions-apiserver v0.34.2 → [Updates: v0.35.0]
• k8s.io/apimachinery v0.34.2 → [Updates: v0.35.0]
• k8s.io/apiserver v0.34.2 → [Updates: v0.35.0]
• k8s.io/client-go v0.34.2 → [Updates: v0.35.0]
• k8s.io/component-base v0.34.2 → [Updates: v0.35.0]
• k8s.io/kubectl v0.34.0 → [Updates: v0.35.0]
• k8s.io/utils v0.0.0-20251222233032-718f0e51e6d2@718f0e51e6d2
• sigs.k8s.io/controller-runtime v0.22.4

helm-values (1)

charts/capsule-proxy/values.yaml (1)

• registry.k8s.io/ingress-nginx/kube-webhook-certgen v1.6.5

regex (2)

.pre-commit-config.yaml (3)

• alessandrojcm/commitlint-pre-commit-hook v9.23.0
• pre-commit/pre-commit-hooks v6.0.0
• adrienverge/yamllint v1.37.1

Makefile (9)

• norwoodj/helm-docs v1.34.0
• kubernetes-sigs/controller-tools v0.19.0 → [Updates: v0.20.0]
• onsi/ginkgo v2.27.2 → [Updates: v2.27.3]
• FiloSottile/mkcert v1.4.4
• helm/chart-testing v3.14.0
• kubernetes-sigs/kind v0.30.0 → [Updates: v0.31.0]
• google/ko v0.18.0 → [Updates: v0.18.1]
• B1NARY-GR0UP/nwa v0.7.7
• golangci/golangci-lint v2.4.0 → [Updates: v2.7.2]

---

• Check this box to trigger a request for Renovate to run again on this repository