Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Repository Problems

These problems occurred while renovating this repository. View logs.

• ⚠️ WARN: Package lookup failures

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• fix(deps): update module github.com/kcp-dev/sdk to v0.32.3
• chore(deps): update module controller-gen to v0.21.0
• fix(deps): update module github.com/onsi/ginkgo/v2 to v2.32.0
• fix(deps): update module github.com/onsi/gomega to v1.42.1
• chore(deps): update actions/setup-go action to v7
• 🔐 Create all rate-limited PRs at once 🔐

---

Warning

Renovate failed to look up the following dependencies: Failed to look up go package github.com/golangci/golangci-lint/v2/cmd/golangci-lint: no-result.

Files affected: tools.lock

---

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): pin dependencies (gcr.io/distroless/static, ghcr.io/opendefensecloud/krop-controller)
• chore(deps): update softprops/action-gh-release digest to 3d0d988
• chore(deps): update dependency helm to v4.2.3
• chore(deps): update dependency opendefensecloud/dev-kit to v1.0.11
• chore(deps): update golang version sync (go, golang)
• chore(deps): update module apigen to v0.32.3
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

dockerfile (1)

Dockerfile (2)

• golang 1.26 → [Updates: 1.26]
• gcr.io/distroless/static nonroot → [Updates: nonroot]

github-actions (10)

.github/workflows/codegen.yaml (5)

• actions/checkout v7@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
• opendefensecloud/dev-kit v1.0.11@41370fd52f6889401ef79388e54e7e38bfbf112e
• actions/setup-go v6@924ae3a1cded613372ab5595356fb5720e22ba16 → [Updates: v7]
• opendefensecloud/dev-kit v1.0.11@41370fd52f6889401ef79388e54e7e38bfbf112e
• ubuntu 24.04

.github/workflows/conventional-commits.yml (5)

• amannn/action-semantic-pull-request v6@48f256284bd46cdaab1048c3721360e808335d50
• actions/checkout v7@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
• wagoid/commitlint-github-action v6@b948419dd99f3fd78a6548d48f94e3df7f6bf3ed
• ubuntu 24.04
• ubuntu 24.04

.github/workflows/docker.yaml (11)

• actions/checkout v7@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
• docker/metadata-action v6@dc802804100637a589fabce1cb79ff13a1411302
• docker/setup-qemu-action v4@96fe6ef7f33517b61c61be40b68a1882f3264fb8
• docker/setup-buildx-action v4@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c
• docker/login-action v4@af1e73f918a031802d376d3c8bbc3fe56130a9b0
• docker/build-push-action v7@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a
• sigstore/cosign-installer v4.1.2@6f9f17788090df1f26f669e9d70d6ae9567deba6
• anchore/sbom-action v0@e22c389904149dbc22b58101806040fa8d37a610
• actions/attest-sbom v4@c604332985a26aa8cf1bdc465b92731239ec6b9e
• actions/attest-build-provenance v4@0f67c3f4856b2e3261c31976d6725780e5e4c373
• ubuntu 24.04

.github/workflows/golang.yaml (11)

• actions/checkout v7@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
• dorny/paths-filter v4@7b450fff21473bca461d4b92ce414b9d0420d706
• actions/checkout v7@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
• opendefensecloud/dev-kit v1.0.11@41370fd52f6889401ef79388e54e7e38bfbf112e
• actions/setup-go v6@924ae3a1cded613372ab5595356fb5720e22ba16 → [Updates: v7]
• golangci/golangci-lint-action v9@ba0d7d2ec06a0ea1cb5fa41b2e4a3ab91d21278a
• actions/checkout v7@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
• actions/setup-go v6@924ae3a1cded613372ab5595356fb5720e22ba16 → [Updates: v7]
• ubuntu 24.04
• ubuntu 24.04
• ubuntu 24.04

.github/workflows/helm-lint.yaml (4)

• actions/checkout v7@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
• azure/setup-helm v5@9bc31f4ebc9c6b171d7bfbaa5d006ae7abdb4310
• ubuntu 24.04
• helm v4.2.2 → [Updates: v4.2.3]

.github/workflows/helm-publish.yaml (6)

• actions/checkout v7@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
• azure/setup-helm v5@9bc31f4ebc9c6b171d7bfbaa5d006ae7abdb4310
• sigstore/cosign-installer v4.1.2@6f9f17788090df1f26f669e9d70d6ae9567deba6
• docker/login-action v4@af1e73f918a031802d376d3c8bbc3fe56130a9b0
• ubuntu 24.04
• helm v4.2.2 → [Updates: v4.2.3]

.github/workflows/osv-scanner.yml (2)

• google/osv-scanner-action v2.3.8@9a498708959aeaef5ef730655706c5a1df1edbc2
• google/osv-scanner-action v2.3.8@9a498708959aeaef5ef730655706c5a1df1edbc2

.github/workflows/release-drafter.yaml (2)

• release-drafter/release-drafter v7@4d75298e00d9e34c483e5ff8c68d0ea1c1940c1e
• ubuntu 24.04

.github/workflows/release.yaml (6)

• actions/checkout v7@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
• actions/setup-go v6@924ae3a1cded613372ab5595356fb5720e22ba16 → [Updates: v7]
• actions/attest-build-provenance v4@0f67c3f4856b2e3261c31976d6725780e5e4c373
• sigstore/cosign-installer v4.1.2@6f9f17788090df1f26f669e9d70d6ae9567deba6
• softprops/action-gh-release v3@718ea10b132b3b2eba29c1007bb80653f286566b → [Updates: v3]
• ubuntu 24.04

.github/workflows/update-action-pins.yml (1)

• actions/checkout v7@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0

gomod (1)

go.mod (14)

• go 1.26.4 → [Updates: 1.26.5]
• github.com/kcp-dev/logicalcluster/v3 v3.0.5
• github.com/kcp-dev/multicluster-provider v0.8.0
• github.com/kcp-dev/multicluster-provider/client v0.8.0
• github.com/kcp-dev/sdk v0.32.2 → [Updates: v0.32.3]
• github.com/kubernetes-sigs/kro v0.9.2
• github.com/onsi/ginkgo/v2 v2.30.0 → [Updates: v2.32.0]
• github.com/onsi/gomega v1.41.0 → [Updates: v1.42.1]
• k8s.io/apiextensions-apiserver v0.36.2
• k8s.io/apimachinery v0.36.2
• k8s.io/client-go v0.36.2
• sigs.k8s.io/controller-runtime v0.24.1
• sigs.k8s.io/multicluster-runtime v0.24.1
• sigs.k8s.io/yaml v1.6.0

helm-values (1)

charts/krop-controller/values.yaml (1)

• ghcr.io/opendefensecloud/krop-controller unknown version → [Updates: ``]

nix (1)

flake.nix (4)

• dev-kit lock file @ 41370fd52f6889401ef79388e54e7e38bfbf112e
• flake-utils lock file @ 11707dc2f618dd54ca8739b309ec4fc024de578b
• go-overlay lock file @ 64e540368a47fa876824900b54474fa4e99005ae
• nixpkgs nixos-unstable

regex (3)

flake.nix (1)

• go 1.26.4 → [Updates: 1.26.5]

Makefile (1)

• opendefensecloud/dev-kit v1.0.10 → [Updates: v1.0.11]

tools.lock (6)

• addlicense v1.2.0
• apigen v0.32.2 → [Updates: v0.32.3]
• controller-gen v0.20.0 → [Updates: v0.21.0]
• ginkgo v2.32.0
• golangci-lint v2.12.2
• osv-scanner v2.4.0

---

• Check this box to trigger a request for Renovate to run again on this repository