Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Config Migration Needed

• Select this checkbox to let Renovate create an automated Config Migration PR.

Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

• chore(deps-dev): update dependency helm to v3.21.3
• chore(deps-dev): update github/codeql-action action to v4.37.0
• chore(deps-dev): update step-security/harden-runner action to v2.20.0
• chore(deps): update quay.io/brancz/kube-rbac-proxy docker tag to v0.22.1

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps-dev): update actions/checkout digest to df4cb1c
• chore(deps): update gcr.io/distroless/static:latest docker digest to d5f030c
• chore(deps-dev): update actions/checkout action to v7
• chore(deps-dev): update actions/setup-go action to v6
• chore(deps-dev): update actions/setup-python action to v6
• chore(deps-dev): update azure/setup-helm action to v5
• chore(deps-dev): update dependency helm to v4
• chore(deps-dev): update docker/login-action action to v4
• chore(deps-dev): update github artifact actions (major) (actions/download-artifact, actions/upload-artifact)
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

dockerfile (1)

Dockerfile (1)

• gcr.io/distroless/static latest@sha256:ce46866b3a5170db3b49364900fb3168dc0833dfb46c26da5c77f22abb01d8c3 → [Updates: latest]

github-actions (12)

.github/workflows/main.yaml (5)

• step-security/harden-runner v2.19.4@9af89fc71515a100421586dfdb3dc9c984fbf411 → [Updates: v2.20.0]
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v7, v6]
• actions/setup-go v5.6.0@40f1582b2485089dde7abd97c1529aa768e1baff → [Updates: v6.5.0]
• shogo82148/actions-goveralls v1.11.0@9606dbc5ac5cf888a0e9ef901515c3cd516a2790
• go 1.26.x

.github/workflows/pr-actions.yaml (3)

• step-security/harden-runner v2.19.4@9af89fc71515a100421586dfdb3dc9c984fbf411 → [Updates: v2.20.0]
• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7.0.0]
• zgosalvez/github-actions-ensure-sha-pinned-actions v5.0.5@3db98c0363e2fa5df3e1c4c471777a7c10b24cc9

.github/workflows/pr-build.yaml (28)

• step-security/harden-runner v2.19.4@9af89fc71515a100421586dfdb3dc9c984fbf411 → [Updates: v2.20.0]
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v7, v6]
• azure/setup-helm v3.5@5119fcb9089d432beecbf79bb2c7915207344b78 → [Updates: v5.0.1]
• actions/setup-python v5.6.0@a26af69be951a213d495a4c3e4e4022e16d87065 → [Updates: v6.3.0]
• helm/chart-testing-action v2.8.0@6ec842c01de15ebb84c8627d2744a0c2f2755c9f
• step-security/harden-runner v2.19.4@9af89fc71515a100421586dfdb3dc9c984fbf411 → [Updates: v2.20.0]
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v7, v6]
• actions/setup-go v5.6.0@40f1582b2485089dde7abd97c1529aa768e1baff → [Updates: v6.5.0]
• step-security/harden-runner v2.19.4@9af89fc71515a100421586dfdb3dc9c984fbf411 → [Updates: v2.20.0]
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v7, v6]
• actions/setup-go v5.6.0@40f1582b2485089dde7abd97c1529aa768e1baff → [Updates: v6.5.0]
• step-security/harden-runner v2.19.4@9af89fc71515a100421586dfdb3dc9c984fbf411 → [Updates: v2.20.0]
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v7, v6]
• actions/setup-go v5.6.0@40f1582b2485089dde7abd97c1529aa768e1baff → [Updates: v6.5.0]
• actions/upload-artifact v4.6.2@ea165f8d65b6e75b540449e92b4886f43607fa02 → [Updates: v7.0.1]
• step-security/harden-runner v2.19.4@9af89fc71515a100421586dfdb3dc9c984fbf411 → [Updates: v2.20.0]
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v7, v6]
• azure/setup-helm v3.5@5119fcb9089d432beecbf79bb2c7915207344b78 → [Updates: v5.0.1]
• actions/setup-python v5.6.0@a26af69be951a213d495a4c3e4e4022e16d87065 → [Updates: v6.3.0]
• helm/chart-testing-action v2.8.0@6ec842c01de15ebb84c8627d2744a0c2f2755c9f
• helm/kind-action v1.14.0@ef37e7f390d99f746eb8b610417061a60e82a6cc
• actions/download-artifact v4.3.0@d3f86a106a0bac45b974a628896c90dbdf5c8093 → [Updates: v8.0.1]
• helm v3.21.2 → [Updates: v3.21.3, v4.2.2]
• python 3.14
• go 1.26.x
• go 1.26.x
• go 1.26.x
• python 3.14

.github/workflows/pr-goreleaser.yaml (3)

• step-security/harden-runner v2.19.4@9af89fc71515a100421586dfdb3dc9c984fbf411 → [Updates: v2.20.0]
• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7.0.0]
• goreleaser/goreleaser-action v7.2.3@f06c13b6b1a9625abc9e6e439d9c05a8f2190e94

.github/workflows/pr-label.yaml (1)

• step-security/harden-runner v2.19.4@9af89fc71515a100421586dfdb3dc9c984fbf411 → [Updates: v2.20.0]

.github/workflows/pr-stale.yaml (1)

• actions/stale v10.3.0@eb5cf3af3ac0a1aa4c9c45633dd1ae542a27a899

.github/workflows/pr-trivy.yaml (3)

• step-security/harden-runner v2.19.4@9af89fc71515a100421586dfdb3dc9c984fbf411 → [Updates: v2.20.0]
• aquasecurity/trivy-action v0.36.0@ed142fd0673e97e23eac54620cfb913e5ce36c25
• github/codeql-action v4.36.3@54f647b7e1bb85c95cddabcd46b0c578ec92bc1a → [Updates: v4.37.0]

.github/workflows/rebase.yaml (3)

• step-security/harden-runner v2.19.4@9af89fc71515a100421586dfdb3dc9c984fbf411 → [Updates: v2.20.0]
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v7, v6]
• cirrus-actions/rebase 1.8@b87d48154a87a85666003575337e27b8cd65f691

.github/workflows/release.yaml (12)

• step-security/harden-runner v2.19.4@9af89fc71515a100421586dfdb3dc9c984fbf411 → [Updates: v2.20.0]
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v7, v6]
• actions/setup-go v5.6.0@40f1582b2485089dde7abd97c1529aa768e1baff → [Updates: v6.5.0]
• docker/login-action v3.7.0@c94ce9fb468520275223c153574b00df6fe4bcc9 → [Updates: v4.4.0]
• sigstore/cosign-installer v4.1.2@6f9f17788090df1f26f669e9d70d6ae9567deba6
• anchore/sbom-action v0.24.0@e22c389904149dbc22b58101806040fa8d37a610
• goreleaser/goreleaser-action v7.2.3@f06c13b6b1a9625abc9e6e439d9c05a8f2190e94
• step-security/harden-runner v2.19.4@9af89fc71515a100421586dfdb3dc9c984fbf411 → [Updates: v2.20.0]
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v7, v6]
• azure/setup-helm v3.5@5119fcb9089d432beecbf79bb2c7915207344b78 → [Updates: v5.0.1]
• sigstore/cosign-installer v4.1.2@6f9f17788090df1f26f669e9d70d6ae9567deba6
• go 1.26.x

.github/workflows/report-on-vulnerabilities.yaml (7)

• step-security/harden-runner v2.19.4@9af89fc71515a100421586dfdb3dc9c984fbf411 → [Updates: v2.20.0]
• aquasecurity/trivy-action v0.36.0@ed142fd0673e97e23eac54620cfb913e5ce36c25
• actions/upload-artifact v4.6.2@ea165f8d65b6e75b540449e92b4886f43607fa02 → [Updates: v7.0.1]
• step-security/harden-runner v2.19.4@9af89fc71515a100421586dfdb3dc9c984fbf411 → [Updates: v2.20.0]
• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7.0.0]
• actions/download-artifact v4.3.0@d3f86a106a0bac45b974a628896c90dbdf5c8093 → [Updates: v8.0.1]
• JasonEtco/create-an-issue v2.9.2@1b14a70e4d8dc185e5cc76d3bec9eab20257b2c5

.github/workflows/scan.yaml (5)

• step-security/harden-runner v2.19.4@9af89fc71515a100421586dfdb3dc9c984fbf411 → [Updates: v2.20.0]
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v7, v6]
• github/codeql-action codeql-bundle-20221020@f0a12816612c7306b485a22cb164feb43c6df818
• github/codeql-action codeql-bundle-20221020@f0a12816612c7306b485a22cb164feb43c6df818
• github/codeql-action codeql-bundle-20221020@f0a12816612c7306b485a22cb164feb43c6df818

.github/workflows/scorecard.yaml (5)

• step-security/harden-runner v2.19.4@9af89fc71515a100421586dfdb3dc9c984fbf411 → [Updates: v2.20.0]
• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7.0.0]
• ossf/scorecard-action v2.4.3@4eaacf0543bb3f2c246792bd56e8cdeffafb205a
• actions/upload-artifact v4.6.2@ea165f8d65b6e75b540449e92b4886f43607fa02 → [Updates: v7.0.1]
• github/codeql-action v4.36.3@54f647b7e1bb85c95cddabcd46b0c578ec92bc1a → [Updates: v4.37.0]

gomod (1)

go.mod (10)

• go 1.26.0
• github.com/fluxcd/pkg/runtime v0.111.0
• github.com/go-logr/logr v1.4.3
• github.com/onsi/ginkgo/v2 v2.32.0
• github.com/onsi/gomega v1.42.1
• github.com/spf13/pflag v1.0.10
• k8s.io/api v0.36.2
• k8s.io/apimachinery v0.36.2
• k8s.io/client-go v0.36.2
• sigs.k8s.io/controller-runtime v0.24.1

helm-values (1)

chart/gc-controller/values.yaml (1)

• quay.io/brancz/kube-rbac-proxy v0.20.0 → [Updates: v0.22.1]

renovate-config (1)

renovate.json

---

• Check this box to trigger a request for Renovate to run again on this repository