Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Config Migration Needed

• Select this checkbox to let Renovate create an automated Config Migration PR.

Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

• chore(deps): update alpine:3.24 docker digest to 294b683
• chore(deps-dev): update github/codeql-action action to v4.38.1

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps-dev): update actions/checkout digest to d23441a
• chore(deps-dev): update dependency go to 1.27.x
• chore(deps): update kubernetes monorepo to v0.37.0 (k8s.io/api, k8s.io/apimachinery, k8s.io/cli-runtime, k8s.io/client-go, k8s.io/kubectl)
• chore(deps): update module github.com/fluxcd/helm-controller/api to v1.6.4
• chore(deps): update module github.com/fluxcd/kustomize-controller/api to v1.9.5
• chore(deps-dev): update actions/checkout action to v7
• chore(deps-dev): update actions/setup-go action to v7
• chore(deps-dev): update actions/stale action to v11
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

dockerfile (1)

Dockerfile (1)

• alpine 3.24@sha256:a2d49ea686c2adfe3c992e47dc3b5e7fa6e6b5055609400dc2acaeb241c829f4 → [Updates: 3.24]

github-actions (11)

.github/workflows/main.yaml (4)

• actions/checkout v6.1.0@d23441a48e516b6c34aea4fa41551a30e30af803 → [Updates: v7.0.1]
• actions/setup-go v6.5.0@924ae3a1cded613372ab5595356fb5720e22ba16 → [Updates: v7.0.0]
• shogo82148/actions-goveralls v1.11.2@77a1912dca42260ee3e97f61bd13ea7ef40baa93
• go 1.25.x → [Updates: 1.27.x]

.github/workflows/pr-actions.yaml (3)

• step-security/harden-runner v2.21.1@e14015d583714f6e62063499dc959a02595150a1
• actions/checkout v6.1.0@d23441a48e516b6c34aea4fa41551a30e30af803 → [Updates: v7.0.1]
• zgosalvez/github-actions-ensure-sha-pinned-actions v5.0.8@60e3a74c7b74a319e8e53e46bc455205f7173e1a

.github/workflows/pr-build.yaml (4)

• actions/checkout v6.1.0@d23441a48e516b6c34aea4fa41551a30e30af803 → [Updates: v7.0.1]
• actions/setup-go v6.5.0@924ae3a1cded613372ab5595356fb5720e22ba16 → [Updates: v7.0.0]
• shogo82148/actions-goveralls v1.11.2@77a1912dca42260ee3e97f61bd13ea7ef40baa93
• go 1.25.x → [Updates: 1.27.x]

.github/workflows/pr-goreleaser.yaml (3)

• step-security/harden-runner v2.21.1@e14015d583714f6e62063499dc959a02595150a1
• actions/checkout v6.1.0@d23441a48e516b6c34aea4fa41551a30e30af803 → [Updates: v7.0.1]
• goreleaser/goreleaser-action v7.2.3@f06c13b6b1a9625abc9e6e439d9c05a8f2190e94

.github/workflows/pr-label.yaml (1)

• step-security/harden-runner v2.21.1@e14015d583714f6e62063499dc959a02595150a1

.github/workflows/pr-stale.yaml (2)

• step-security/harden-runner v2.21.1@e14015d583714f6e62063499dc959a02595150a1
• actions/stale v10.4.0@1e223db275d687790206a7acac4d1a11bd6fe629 → [Updates: v11.0.0]

.github/workflows/pr-trivy.yaml (3)

• step-security/harden-runner v2.21.1@e14015d583714f6e62063499dc959a02595150a1
• aquasecurity/trivy-action v0.36.0@ed142fd0673e97e23eac54620cfb913e5ce36c25
• github/codeql-action v4.38.0@b96794f015dfd88f77b49b1c93e0fa7110f94c63 → [Updates: v4.38.1]

.github/workflows/rebase.yaml (3)

• step-security/harden-runner v2.21.1@e14015d583714f6e62063499dc959a02595150a1
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v7, v6]
• cirrus-actions/rebase 1.8@b87d48154a87a85666003575337e27b8cd65f691

.github/workflows/release.yaml (7)

• actions/checkout v6.1.0@d23441a48e516b6c34aea4fa41551a30e30af803 → [Updates: v7.0.1]
• actions/setup-go v6.5.0@924ae3a1cded613372ab5595356fb5720e22ba16 → [Updates: v7.0.0]
• docker/login-action v4.6.0@dbcb813823bdd20940b903addbd779551569679f
• sigstore/cosign-installer v4.1.2@6f9f17788090df1f26f669e9d70d6ae9567deba6
• anchore/sbom-action v0.24.2@3ad7283483fc7af8ff2b4ea19663c2d5ca935e26
• goreleaser/goreleaser-action v7.2.3@f06c13b6b1a9625abc9e6e439d9c05a8f2190e94
• go 1.25.x → [Updates: 1.27.x]

.github/workflows/scan.yaml (5)

• step-security/harden-runner v2.21.1@e14015d583714f6e62063499dc959a02595150a1
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v7, v6]
• github/codeql-action codeql-bundle-20221020@f0a12816612c7306b485a22cb164feb43c6df818
• github/codeql-action codeql-bundle-20221020@f0a12816612c7306b485a22cb164feb43c6df818
• github/codeql-action codeql-bundle-20221020@f0a12816612c7306b485a22cb164feb43c6df818

.github/workflows/scorecard.yaml (5)

• step-security/harden-runner v2.21.1@e14015d583714f6e62063499dc959a02595150a1
• actions/checkout v6.1.0@d23441a48e516b6c34aea4fa41551a30e30af803 → [Updates: v7.0.1]
• ossf/scorecard-action v2.4.4@2d1146689b8cda280b9bc96326124645441f03bc
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• github/codeql-action v4.38.0@b96794f015dfd88f77b49b1c93e0fa7110f94c63 → [Updates: v4.38.1]

gomod (1)

go.mod (13)

• go 1.25.0
• github.com/fluxcd/helm-controller/api v1.5.5 → [Updates: v1.6.4]
• github.com/fluxcd/kustomize-controller/api v1.8.5 → [Updates: v1.9.5]
• github.com/spf13/cobra v1.10.2
• github.com/stretchr/testify v1.12.1
• gotest.tools/v3 v3.5.2
• k8s.io/api v0.35.4 → [Updates: v0.37.0]
• k8s.io/apimachinery v0.35.4 → [Updates: v0.37.0]
• k8s.io/cli-runtime v0.35.4 → [Updates: v0.37.0]
• k8s.io/client-go v0.35.4 → [Updates: v0.37.0]
• k8s.io/klog/v2 v2.140.0
• k8s.io/kubectl v0.35.4 → [Updates: v0.37.0]
• sigs.k8s.io/cli-utils v0.37.2

homebrew (1)

Formula/gitops-zombies.rb (1)

• raffis/gitops-zombies v0.1.1

renovate-config (1)

renovate.json

---

• Check this box to trigger a request for Renovate to run again on this repository