Dependency Dashboard 🤖

[cluster-stack-bot]

Config Migration Needed

• Select this checkbox to let Renovate create an automated Config Migration PR.

Repository problems

Renovate tried to run on this repository, but found these problems.

• WARN: Package lookup failures

Edited/Blocked

The following updates have been manually edited so Renovate will no longer make changes. To discard all commits and start over, click on a checkbox below.

• 🌱 Update image docker.io/library/alpine to v3.22.5
• 🌱 Update Update Golang Dependencies group (patch) (github.com/go-logr/logr, github.com/onsi/gomega, go, go.uber.org/zap)
• 🌱 Update github-actions group (minor) (actions/cache, actions/checkout, actions/create-github-app-token, actions/setup-go, docker/build-push-action, docker/login-action, docker/metadata-action, docker/setup-buildx-action, docker/setup-qemu-action, go, softprops/action-gh-release)
• 🌱 Update image docker.io/library/alpine to v3.24.1
• 🌱 Update Update Golang Dependencies group (minor) (github.com/onsi/ginkgo/v2, github.com/onsi/gomega, github.com/stretchr/testify, go, go.uber.org/zap, golang.org/x/mod, golang.org/x/oauth2, sigs.k8s.io/kind)
• 🌱 Update Builder Image group (adrienverge/yamllint, docker.io/aquasec/trivy, docker.io/hadolint/hadolint, docker.io/library/alpine, golangci/golangci-lint, helm/helm)
• 🌱 Update Cso Image group (docker.io/alpine/helm, docker.io/library/alpine)
• 🌱 Update Github Actions group to v44.2.6
• 🌱 Update Github Actions group to v45.0.3
• 🌱 Update Github Actions group to v46.3.0
• 🌱 Update github-actions group (major) (actions/checkout, actions/setup-go, actions/upload-artifact, docker/build-push-action)
• 🌱 Update github-actions group (major) (docker/login-action, docker/setup-buildx-action, docker/setup-qemu-action, sigstore/cosign-installer)
• 🌱 Update github-actions group to v3 (major) (actions/create-github-app-token, softprops/action-gh-release)

---

Warning

Renovate failed to look up the following dependencies: Could not determine new digest for update (go package github.com/go-task/slim-sprig).

Files affected: go.mod

---

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• 🌱 Update Golang Dependencies group to v2.6.2 [SECURITY]
• 🌱 Update Golang Dependencies group to v0.29.0 [SECURITY]
• 🌱 Update github-actions group (patch) (actions/checkout, renovatebot/github-action, sigstore/cosign-installer)
• 🌱 Update github-actions group (major) (actions/cache, actions/checkout, actions/upload-artifact, docker/metadata-action)
• 🌱 Update github-actions group (major) (actions/cache, actions/checkout, actions/upload-artifact)
• Click on this checkbox to rebase all open PRs at once

Detected dependencies

dockerfile

images/builder/Dockerfile

• docker.io/library/alpine 3.22.1
• docker.io/library/alpine 3.22.1
• docker.io/hadolint/hadolint v2.13.1-alpine@sha256:84c2f9088a8cb0ea2bd16b5349186770d16441e77eec1a1d1e0574cf7dff47ac
• docker.io/aquasec/trivy 0.66.0
• docker.io/library/golang 1.24.6-bullseye

images/cache/Dockerfile

• docker.io/library/alpine 3.22.1@sha256:4bcff63911fcb4448bd4fdacec207030997caf25e9bea4045fa6c8c44de311d1
• docker.io/library/alpine 3.22.1@sha256:4bcff63911fcb4448bd4fdacec207030997caf25e9bea4045fa6c8c44de311d1

images/cso/Dockerfile

• docker.io/alpine/helm 3.19.0
• docker.io/library/golang 1.24.6-bullseye
• docker.io/library/alpine 3.22.1

github-actions

.github/actions/metadata/action.yaml

• docker/metadata-action v5.8.0@c1e51972afc2121e065aed6d45c65596fe445f3f

.github/actions/setup-go/action.yaml

• actions/setup-go v6.0.0@44694675825211faa026b3c33043df3e48a5fa00
• actions/cache v4@0400d5f644dc74513175e3cd8d07132dd4860809
• actions/cache v4@0400d5f644dc74513175e3cd8d07132dd4860809
• go 1.25

.github/workflows/build.yml

• actions/checkout v4@08eba0b27e820071cde6df949e0beb9ba4906955
• docker/setup-qemu-action v3@29109295f81e9208d7d86ff1c6c12d2833863392
• docker/setup-buildx-action v3@e468171a9de216ec08956ac3ada2f0791b6bd435
• docker/login-action v3.5.0@184bdaa0721073962dff0199f1fb9940f07167d1
• sigstore/cosign-installer v3.10.0@d7543c93d881b35a8faa02e8e3605f69b7a1ce62
• actions/cache v4.2.4@0400d5f644dc74513175e3cd8d07132dd4860809
• docker/build-push-action v6.18.0@263435318d21b8e681c14492fe198d362a7d2c83
• docker/build-push-action v6@263435318d21b8e681c14492fe198d362a7d2c83
• actions/upload-artifact v4.6.2@ea165f8d65b6e75b540449e92b4886f43607fa02
• docker/build-push-action v6.18.0@263435318d21b8e681c14492fe198d362a7d2c83

.github/workflows/kubebuilder-markers-checker.yml

• actions/checkout v4@08eba0b27e820071cde6df949e0beb9ba4906955
• ubuntu 24.04

.github/workflows/pr-lint.yml

• actions/checkout v4.3.0@08eba0b27e820071cde6df949e0beb9ba4906955
• ghcr.io/sovereigncloudstack/cso-builder 1.1.34

.github/workflows/release.yml

• actions/checkout v4@08eba0b27e820071cde6df949e0beb9ba4906955
• docker/setup-qemu-action v3@29109295f81e9208d7d86ff1c6c12d2833863392
• docker/setup-buildx-action v3@e468171a9de216ec08956ac3ada2f0791b6bd435
• docker/login-action v3.5.0@184bdaa0721073962dff0199f1fb9940f07167d1
• sigstore/cosign-installer v3.10.0@d7543c93d881b35a8faa02e8e3605f69b7a1ce62
• docker/build-push-action v6@263435318d21b8e681c14492fe198d362a7d2c83
• actions/upload-artifact v4.6.2@ea165f8d65b6e75b540449e92b4886f43607fa02
• actions/checkout v4@08eba0b27e820071cde6df949e0beb9ba4906955
• softprops/action-gh-release v2@6cbd405e2c4e67a21c47fa9e383d020e4e28b836

.github/workflows/schedule-cache-cleaner-cso-image.yml

• actions/cache v4.2.4@0400d5f644dc74513175e3cd8d07132dd4860809
• ubuntu 24.04

.github/workflows/schedule-scan-image.yml

• actions/checkout v4.3.0@08eba0b27e820071cde6df949e0beb9ba4906955
• ghcr.io/sovereigncloudstack/cso-builder 1.1.34

.github/workflows/schedule-update-bot.yaml

• actions/checkout v4.3.0@08eba0b27e820071cde6df949e0beb9ba4906955
• actions/create-github-app-token v2@67018539274d69449ef7c02e8e71183d1719ab42
• renovatebot/github-action v43.0.12@f8af9272cd94a4637c29f60dea8731afd3134473

.github/workflows/test.yml

• actions/checkout v4.3.0@08eba0b27e820071cde6df949e0beb9ba4906955

.github/workflows/verifier.yml

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd

gomod

go.mod

• go 1.24.0
• go 1.25.1
• github.com/go-logr/logr v1.4.3
• github.com/go-task/slim-sprig v0.0.0-20230315185526-52ccab3ef572@52ccab3ef572
• github.com/google/cel-go v0.26.1
• github.com/google/go-github/v52 v52.0.0
• github.com/onsi/ginkgo/v2 v2.25.3
• github.com/onsi/gomega v1.38.2
• github.com/stretchr/testify v1.11.1
• golang.org/x/mod v0.28.0
• golang.org/x/oauth2 v0.31.0
• oras.land/oras-go/v2 v2.6.0
• sigs.k8s.io/controller-runtime v0.18.7
• sigs.k8s.io/kind v0.30.0
• github.com/go-logr/zapr v1.3.0
• github.com/gobuffalo/flect v1.0.3
• go.uber.org/zap v1.27.0
• gopkg.in/yaml.v3 v3.0.1

regex

images/builder/Dockerfile

• lycheeverse/lychee v0.15.1
• lycheeverse/lychee v0.15.1
• helm/helm v3.19.0
• golangci/golangci-lint v2.4.0
• adrienverge/yamllint v1.37.1
• opt-nc/yamlfixer 0.9.15