Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Config Migration Needed

• Select this checkbox to let Renovate create an automated Config Migration PR.

Repository Problems

These problems occurred while renovating this repository. View logs.

• ⚠️ WARN: Package lookup failures

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• Update debian:bookworm-slim Docker digest to 8820086
• Update docker/setup-buildx-action digest to 8d2750c
• Update docker/setup-qemu-action digest to c7c5346
• Update fkirc/skip-duplicate-actions action to v5.3.2
• Update module kernel.org/pub/linux/libs/security/libcap/cap to v1.2.78
• Update dependency golangci/golangci-lint to v1.64.8
• Update module github.com/alecthomas/kong to v0.9.0
• Update module github.com/bufbuild/buf to v1.72.0
• Update module github.com/crossplane/crossplane-runtime to v1.20.11
• Update module github.com/cyphar/filepath-securejoin to v0.7.0
• Update module github.com/google/go-cmp to v0.7.0
• Update module github.com/google/go-containerregistry to v0.22.0
• Update module github.com/google/uuid to v1.6.0
• Update module github.com/opencontainers/runtime-spec to v1.3.0
• Update module golang.org/x/sync to v0.22.0
• Update module google.golang.org/grpc/cmd/protoc-gen-go-grpc to v1.6.2
• Update actions/checkout action to v7
• Update actions/setup-go action to v7
• Update codecov/codecov-action action to v7
• Update dependency golangci/golangci-lint to v2
• Update dependency ubuntu to v24
• Update docker/login-action action to v4
• Update docker/setup-buildx-action action to v4
• Update docker/setup-qemu-action action to v4
• Update golangci/golangci-lint-action action to v9
• Update module github.com/alecthomas/kong to v1
• Update module github.com/crossplane/crossplane-runtime to v2
• Update negz/create-tag action to v2
• Update zeebe-io/backport-action action to v4
• 🔐 Create all rate-limited PRs at once 🔐

---

Warning

Renovate failed to look up the following dependencies: Failed to look up go package google.golang.org/protobuf: no-result, Failed to look up go package github.com/klauspost/compress: no-result.

Files affected: go.mod

---

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• Update module github.com/go-chi/chi/v5 to v5.3.0 [SECURITY]
• Update module github.com/rs/cors to v1.11.0 [SECURITY]
• Update module go.opentelemetry.io/otel/sdk to v1.43.0 [SECURITY]
• Update module golang.org/x/crypto to v0.55.0 [SECURITY]
• Update module golang.org/x/mod to v0.40.0 [SECURITY]
• Update module golang.org/x/oauth2 to v0.27.0 [SECURITY]
• Update module golang.org/x/sys to v0.44.0 [SECURITY]
• Update module golang.org/x/text to v0.39.0 [SECURITY]
• Update module google.golang.org/grpc to v1.82.1 [SECURITY]
• Update module github.com/docker/cli to v29 [SECURITY]
• Update actions/checkout digest to 11d5960
• Update actions/setup-go digest to 7b8cf10
• Update codecov/codecov-action digest to ab904c4
• Update docker/login-action digest to c94ce9f
• Update dependency golang to v1.27.0
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

dockerfile (1)

cluster/images/function-runtime-oci/Dockerfile (1)

• debian bookworm-slim@sha256:24c92a69df28b21676d721fe18c0bf64138bfc69b486746ad935b49cc31b0b91 → [Updates: bookworm-slim]

github-actions (3)

.github/workflows/backport.yml (3)

• actions/checkout v4@8ade135a41bc03ea155e62e844d188df1ea18608 → [Updates: v7, v4]
• zeebe-io/backport-action v1.4.0@bd68141f079bd036e45ea8149bc9d174d5a04703 → [Updates: v4.6.0]
• ubuntu 22.04 → [Updates: 24.04]

.github/workflows/ci.yml (22)

• fkirc/skip-duplicate-actions v5.3.0@12aca0a884f6137d619d6a8a09fcc3406ced5281 → [Updates: v5.3.2]
• actions/checkout v4@8ade135a41bc03ea155e62e844d188df1ea18608 → [Updates: v7, v4]
• actions/setup-go v4@93397bea11091df50f3d7e59dc26a7711a8bcfbe → [Updates: v7, v4]
• golangci/golangci-lint-action v3@3a919529898de77ec3da873e3063ca4b10e7f5cc → [Updates: v9]
• actions/checkout v4@8ade135a41bc03ea155e62e844d188df1ea18608 → [Updates: v7, v4]
• actions/setup-go v4@93397bea11091df50f3d7e59dc26a7711a8bcfbe → [Updates: v7, v4]
• actions/checkout v4@8ade135a41bc03ea155e62e844d188df1ea18608 → [Updates: v7, v4]
• actions/setup-go v4@93397bea11091df50f3d7e59dc26a7711a8bcfbe → [Updates: v7, v4]
• actions/checkout v4@8ade135a41bc03ea155e62e844d188df1ea18608 → [Updates: v7, v4]
• actions/setup-go v4@93397bea11091df50f3d7e59dc26a7711a8bcfbe → [Updates: v7, v4]
• codecov/codecov-action v3@eaaf4bedf32dbdc6b720b63067d99c4d77d6047d → [Updates: v7, v3]
• docker/setup-qemu-action v3@68827325e0b33c7199eb31dd4e31fbe9023e06e3 → [Updates: v4, v3]
• docker/setup-buildx-action v3@f95db51fddba0c2d1ec667646a06c2ce06100226 → [Updates: v4, v3]
• actions/checkout v4@8ade135a41bc03ea155e62e844d188df1ea18608 → [Updates: v7, v4]
• actions/setup-go v4@93397bea11091df50f3d7e59dc26a7711a8bcfbe → [Updates: v7, v4]
• docker/login-action v3@343f7c4344506bcbf9b4de18042ae17996df046d → [Updates: v4, v3]
• ubuntu 22.04 → [Updates: 24.04]
• ubuntu 22.04 → [Updates: 24.04]
• ubuntu 22.04 → [Updates: 24.04]
• ubuntu 22.04 → [Updates: 24.04]
• ubuntu 22.04 → [Updates: 24.04]
• ubuntu 22.04 → [Updates: 24.04]

.github/workflows/tag.yml (3)

• actions/checkout v4@8ade135a41bc03ea155e62e844d188df1ea18608 → [Updates: v7, v4]
• negz/create-tag v1@39bae1e0932567a58c20dea5a1a0d18358503320 → [Updates: v2]
• ubuntu 22.04 → [Updates: 24.04]

gomod (1)

go.mod (26)

• go 1.20
• github.com/Masterminds/semver v1.5.0
• github.com/alecthomas/kong v0.8.0 → [Updates: v0.9.0, v1.16.1]
• github.com/bufbuild/buf v1.26.1 → [Updates: v1.72.0]
• github.com/crossplane/crossplane-runtime v1.13.0 → [Updates: v1.20.11, v2.4.0]
• github.com/cyphar/filepath-securejoin v0.2.4 → [Updates: v0.7.0]
• github.com/google/go-cmp v0.5.9 → [Updates: v0.7.0]
• github.com/google/go-containerregistry v0.16.1 → [Updates: v0.22.0]
• github.com/google/uuid v1.3.1 → [Updates: v1.6.0]
• github.com/opencontainers/runtime-spec v1.1.0 → [Updates: v1.3.0]
• golang.org/x/sync v0.3.0 → [Updates: v0.22.0]
• golang.org/x/sys v0.12.0 → [Updates: v0.44.0]
• google.golang.org/grpc v1.58.3 → [Updates: v1.82.1]
• google.golang.org/grpc/cmd/protoc-gen-go-grpc v1.3.0 → [Updates: v1.6.2]
• google.golang.org/protobuf v1.31.0
• kernel.org/pub/linux/libs/security/libcap/cap v1.2.69 → [Updates: v1.2.78]
• github.com/docker/cli v24.0.5+incompatible → [Updates: v29.2.0+incompatible]
• github.com/docker/docker v24.0.5+incompatible
• github.com/go-chi/chi/v5 v5.0.10 → [Updates: v5.3.0]
• github.com/klauspost/compress v1.16.7
• github.com/rs/cors v1.9.0 → [Updates: v1.11.0]
• go.opentelemetry.io/otel/sdk v1.16.0 → [Updates: v1.43.0]
• golang.org/x/crypto v0.12.0 → [Updates: v0.55.0]
• golang.org/x/mod v0.12.0 → [Updates: v0.40.0]
• golang.org/x/oauth2 v0.11.0 → [Updates: v0.27.0]
• golang.org/x/text v0.12.0 → [Updates: v0.39.0]

regex (3)

.github/workflows/ci.yml (1)

• golang 1.21.2 → [Updates: 1.27.0]

.github/workflows/ci.yml (1)

• golangci/golangci-lint 1.54.2 → [Updates: 1.64.8, 2.13.2]

Makefile (1)

• golangci/golangci-lint 1.54.2 → [Updates: 1.64.8, 2.13.2]

---

• Check this box to trigger a request for Renovate to run again on this repository