Dependency Dashboard

[agntcy-automation]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Repository Problems

Renovate tried to run on this repository, but found these problems.

• ⚠️ WARN: Package lookup failures

Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

• chore(deps): update gcr.io/distroless/static:nonroot docker digest to d29e660
• chore(deps): update postgresql (docker.io/bitnami/postgresql, postgresql)
• chore(deps): update python docker tag to v3.14
• chore(deps): lock file maintenance
• 🔐 Create all awaiting schedule PRs at once 🔐

Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

• chore(deps): update google.golang.org/genproto/googleapis/api digest to f0a9213
• chore(deps): update dependency go to v1.26.5
• chore(deps): update ghcr.io/grpc-ecosystem/grpc-health-probe docker tag to v0.4.53
• chore(deps): update golang docker tag to v1.26.5
• chore(deps): update module github.com/spiffe/spire to v1.15.2
• chore(deps): update module github.com/libp2p/go-libp2p-pubsub to v0.17.0
• chore(deps): update module golang.org/x/crypto to v0.54.0
• chore(deps): update module golang.org/x/mod to v0.38.0
• chore(deps): update module golang.org/x/term to v0.45.0

---

Warning

Renovate failed to look up the following dependencies: Failed to look up github-tags package aquasecurity/trivy-action.

Files affected: .github/workflows/container-security-scan.yml

---

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): update module oras.land/oras-go/v2 to v2.6.2 [security]
• chore(deps): update docker/dockerfile:1 docker digest to 87999aa
• chore(deps): update github.com/agntcy/oasf-sdk/pkg digest to 88bd967
• chore(deps): update golang:1.26.4-bookworm docker digest to b305420
• chore(deps): update go patches (buf.build/gen/go/agntcy/oasf-sdk/protocolbuffers/go, buf.build/gen/go/agntcy/oasf/protocolbuffers/go, github.com/ThalesGroup/crypto11, github.com/lestrrat-go/jwx/v2)
• chore(deps): update helm release zot to v0.1.120
• chore(deps): update github actions (actions/cache, docker/bake-action, docker/login-action, docker/metadata-action, docker/setup-buildx-action, docker/setup-qemu-action, dorny/paths-filter, github/codeql-action, marocchino/sticky-pull-request-comment)
• chore(deps): update module github.com/pelletier/go-toml/v2 to v2.4.3
• chore(deps): update module github.com/rs/zerolog to v1.35.1
• Click on this checkbox to rebase all open PRs at once

Vulnerabilities

Important

4/25 CVEs have Renovate fixes.

gomod

api/go.mod

golang.org/x/crypto

• GO-2026-5932

cli/go.mod

golang.org/x/crypto

• GO-2026-5932

oras.land/oras-go/v2

• GHSA-fxhp-mv3v-67qp (fixed in > 2.6.1)

github.com/aquasecurity/trivy

• GO-2026-4919

github.com/aws/aws-sdk-go

• GO-2022-0635
• GO-2022-0646

github.com/sigstore/cosign/v2

• GO-2026-4529

github.com/libp2p/go-libp2p-kad-dht

• GO-2024-3218

client/go.mod

golang.org/x/crypto

• GO-2026-5932

reconciler/go.mod

oras.land/oras-go/v2

• GHSA-fxhp-mv3v-67qp (fixed in > 2.6.1)

golang.org/x/crypto

• GO-2026-5932

samples/ard-over-ads/go.mod

github.com/aquasecurity/trivy

• GO-2026-4919

github.com/aws/aws-sdk-go

• GO-2022-0635
• GO-2022-0646

github.com/containerd/containerd

• GO-2026-5064
• GO-2026-5338
• GO-2026-5622

github.com/libp2p/go-libp2p-kad-dht

• GO-2024-3218

github.com/sigstore/cosign/v2

• GO-2026-4529

golang.org/x/crypto

• GO-2026-5932

oras.land/oras-go/v2

• GHSA-fxhp-mv3v-67qp (fixed in > 2.6.1)

server/go.mod

github.com/libp2p/go-libp2p-kad-dht

• GO-2024-3218

oras.land/oras-go/v2

• GHSA-fxhp-mv3v-67qp (fixed in > 2.6.1)

golang.org/x/crypto

• GO-2026-5932

utils/go.mod

golang.org/x/crypto

• GO-2026-5932

Detected Dependencies

docker-compose (2)

install/docker/docker-compose.debug.yml

install/docker/docker-compose.yml (2)

• ghcr.io/project-zot/zot v2.1.17 → [Updates: v2.1.18]
• docker.io/bitnami/postgresql latest@sha256:91a6c3f4b4d687546c1d07c1ef7c27a5e85e2a0ce8a192fe94cad5bbde0a1aba → [Updates: latest]

dockerfile (3)

cli/Dockerfile (4)

• docker/dockerfile 1@sha256:2780b5c3bab67f1f76c781860de469442999ed1a0d7992a5efdf2cffc0e3d769 → [Updates: 1]
• tonistiigi/xx 1.9.0@sha256:c64defb9ed5a91eacb37f96ccc3d4cd72521c4bd18d5442905b95e2226b0e707
• golang 1.26.4-bookworm@sha256:5f68ec6805843bd3981a951ffada82a26a0bd2631045c8f7dba483fa868f5ec5 → [Updates: 1.26.5-bookworm, 1.26.4-bookworm]
• gcr.io/distroless/static nonroot@sha256:963fa6c544fe5ce420f1f54fb88b6fb01479f054c8056d0f74cc2c6000df5240 → [Updates: nonroot]

reconciler/Dockerfile (6)

• docker/dockerfile 1@sha256:2780b5c3bab67f1f76c781860de469442999ed1a0d7992a5efdf2cffc0e3d769 → [Updates: 1]
• tonistiigi/xx 1.9.0@sha256:c64defb9ed5a91eacb37f96ccc3d4cd72521c4bd18d5442905b95e2226b0e707
• golang 1.26.4-bookworm@sha256:5f68ec6805843bd3981a951ffada82a26a0bd2631045c8f7dba483fa868f5ec5 → [Updates: 1.26.5-bookworm, 1.26.4-bookworm]
• busybox 1.38.0-musl@sha256:8635836765b0c4c43970660219739baa58b0883c2e429e4b8918f7dd1519455c
• busybox 1.38.0-musl@sha256:8635836765b0c4c43970660219739baa58b0883c2e429e4b8918f7dd1519455c
• python 3.13-slim → [Updates: 3.14-slim]

server/Dockerfile (8)

• docker/dockerfile 1@sha256:2780b5c3bab67f1f76c781860de469442999ed1a0d7992a5efdf2cffc0e3d769 → [Updates: 1]
• tonistiigi/xx 1.9.0@sha256:c64defb9ed5a91eacb37f96ccc3d4cd72521c4bd18d5442905b95e2226b0e707
• golang 1.26.4-bookworm@sha256:5f68ec6805843bd3981a951ffada82a26a0bd2631045c8f7dba483fa868f5ec5 → [Updates: 1.26.5-bookworm, 1.26.4-bookworm]
• ghcr.io/grpc-ecosystem/grpc-health-probe v0.4.52 → [Updates: v0.4.53]
• gcr.io/distroless/static nonroot@sha256:963fa6c544fe5ce420f1f54fb88b6fb01479f054c8056d0f74cc2c6000df5240 → [Updates: nonroot]
• ghcr.io/grpc-ecosystem/grpc-health-probe v0.4.52 → [Updates: v0.4.53]
• busybox 1.38.0-musl@sha256:8635836765b0c4c43970660219739baa58b0883c2e429e4b8918f7dd1519455c
• ghcr.io/grpc-ecosystem/grpc-health-probe v0.4.52 → [Updates: v0.4.53]

github-actions (26)

.github/actions/build-dirctl/action.yaml (2)

• actions/setup-go v6.5.0@924ae3a1cded613372ab5595356fb5720e22ba16
• go-task/setup-task v2.1.0@01a4adf9db2d14c1de7a560f09170b6e0df736aa

.github/actions/fetch-oidc-token/action.yaml (1)

• actions/github-script v8.0.0@ed597411d8f924073f98dfc5c65a23a2325f34cd → [Updates: v9.0.0]

.github/actions/trigger-integrations/action.yaml (2)

• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7.0.0]
• actions/github-script v8.0.0@ed597411d8f924073f98dfc5c65a23a2325f34cd → [Updates: v9.0.0]

.github/workflows/buf-ci.yaml (2)

• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7.0.0]
• bufbuild/buf-action v1.4.0@fd21066df7214747548607aaa45548ba2b9bc1ff

.github/workflows/build-feature.yaml (1)

• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7.0.0]

.github/workflows/ci.yaml (18)

• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7.0.0]
• dorny/paths-filter v4.0.1@fbd0ab8f3e69293af611ebaee6363fc25e6d187d → [Updates: v4.0.2]
• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7.0.0]
• actions/setup-go v6.5.0@924ae3a1cded613372ab5595356fb5720e22ba16
• go-task/setup-task v2.1.0@01a4adf9db2d14c1de7a560f09170b6e0df736aa
• actions/cache v5.0.5@27d5ce7f107fe9357f9df03efb73ab90386fccae → [Updates: v5.1.0, v6.1.0]
• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7.0.0]
• go-task/setup-task v2.1.0@01a4adf9db2d14c1de7a560f09170b6e0df736aa
• actions/cache v5.0.5@27d5ce7f107fe9357f9df03efb73ab90386fccae → [Updates: v5.1.0, v6.1.0]
• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7.0.0]
• go-task/setup-task v2.1.0@01a4adf9db2d14c1de7a560f09170b6e0df736aa
• actions/setup-node v4.4.0@49933ea5288caeca8642d1e84afbd3f7d6820020 → [Updates: v6.4.0]
• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7.0.0]
• actions/download-artifact v8.0.1@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• codecov/codecov-action v6.0.2@fb8b3582c8e4def4969c97caa2f19720cb33a72f → [Updates: v7.0.0]
• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7.0.0]
• go 1.26.4 → [Updates: 1.26.5]
• node 22 → [Updates: 24]

.github/workflows/codeql.yml (6)

• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7.0.0]
• actions/setup-go v6.5.0@924ae3a1cded613372ab5595356fb5720e22ba16
• arduino/setup-task v2.0.0@b91d5d2c96a56797b48ac1e0e89220bf64044611 → [Updates: v3.0.0]
• github/codeql-action v4.36.2@8aad20d150bbac5944a9f9d289da16a4b0d87c1e → [Updates: v4.36.3]
• github/codeql-action v4.36.2@8aad20d150bbac5944a9f9d289da16a4b0d87c1e → [Updates: v4.36.3]
• go 1.26.4 → [Updates: 1.26.5]

.github/workflows/container-security-scan.yml (7)

• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7.0.0]
• go-task/setup-task v2.1.0@01a4adf9db2d14c1de7a560f09170b6e0df736aa
• aquasecurity/trivy-action v0.35.0@57a97c7e7821a5776cebc9bb87c984fa69cba8f1
• github/codeql-action v4.36.2@8aad20d150bbac5944a9f9d289da16a4b0d87c1e → [Updates: v4.36.3]
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7.0.0]
• actions/download-artifact v8.0.1@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c

.github/workflows/demo-dir.yaml (1)

• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7.0.0]

.github/workflows/dependencies.yaml (7)

• actions/create-github-app-token v3.2.0@bcd2ba49218906704ab6c1aa796996da409d3eb1
• actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
• go-task/setup-task v2.1.0@01a4adf9db2d14c1de7a560f09170b6e0df736aa
• actions/setup-go v6.5.0@924ae3a1cded613372ab5595356fb5720e22ba16
• actions/setup-node v6.4.0@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e
• go 1.26.4 → [Updates: 1.26.5]
• node 24.x

.github/workflows/docs-ci.yaml

.github/workflows/docs-deploy.yml

.github/workflows/import-records.yaml (13)

• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7.0.0]
• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7.0.0]
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7.0.0]
• actions/download-artifact v8.0.1@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• actions/download-artifact v8.0.1@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7.0.0]
• actions/download-artifact v8.0.1@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• actions/cache v5.0.5@27d5ce7f107fe9357f9df03efb73ab90386fccae → [Updates: v5.1.0, v6.1.0]
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7.0.0]

.github/workflows/lint-pr-title.yaml (3)

• amannn/action-semantic-pull-request v6.1.1@48f256284bd46cdaab1048c3721360e808335d50
• marocchino/sticky-pull-request-comment v3.0.4@0ea0beb66eb9baf113663a64ec522f60e49231c0 → [Updates: v3.0.5]
• marocchino/sticky-pull-request-comment v3.0.4@0ea0beb66eb9baf113663a64ec522f60e49231c0 → [Updates: v3.0.5]

.github/workflows/oidc-test.yml (1)

• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7.0.0]

.github/workflows/post-release.yml (3)

• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7.0.0]
• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7.0.0]
• actions/github-script v8.0.0@ed597411d8f924073f98dfc5c65a23a2325f34cd → [Updates: v9.0.0]

.github/workflows/pr.yaml (1)

• codelytv/pr-size-labeler v1.10.4@095a41fca88b8764fd9e008ad269bcdb82bb38b9

.github/workflows/project.yaml (3)

• actions/stale v10.3.0@eb5cf3af3ac0a1aa4c9c45633dd1ae542a27a899 → [Updates: v10.4.0]
• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7.0.0]
• EndBug/label-sync v2.3.3@52074158190acb45f3077f9099fea818aa43f97a

.github/workflows/reusable-brew-update.yaml (1)

• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7.0.0]

.github/workflows/reusable-build.yaml (23)

• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7.0.0]
• go-task/setup-task v2.1.0@01a4adf9db2d14c1de7a560f09170b6e0df736aa
• actions/setup-go v6.5.0@924ae3a1cded613372ab5595356fb5720e22ba16
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7.0.0]
• docker/bake-action v7.2.0@6614cfa25eff9a0b2b2697efb0b6159e7680d584 → [Updates: v7.3.0]
• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7.0.0]
• docker/login-action v4.2.0@650006c6eb7dba73a995cc03b0b2d7f5ca915bee → [Updates: v4.4.0]
• docker/setup-qemu-action v4.1.0@06116385d9baf250c9f4dcb4858b16962ea869c3 → [Updates: v4.2.0]
• docker/setup-buildx-action v4.1.0@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 → [Updates: v4.2.0]
• docker/metadata-action v6.1.0@80c7e94dd9b9319bd5eb7a0e0fe9291e23a2a2e9 → [Updates: v6.2.0]
• docker/bake-action v7.2.0@6614cfa25eff9a0b2b2697efb0b6159e7680d584 → [Updates: v7.3.0]
• docker/bake-action v7.2.0@6614cfa25eff9a0b2b2697efb0b6159e7680d584 → [Updates: v7.3.0]
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7.0.0]
• docker/login-action v4.2.0@650006c6eb7dba73a995cc03b0b2d7f5ca915bee → [Updates: v4.4.0]
• docker/setup-qemu-action v4.1.0@06116385d9baf250c9f4dcb4858b16962ea869c3 → [Updates: v4.2.0]
• docker/setup-buildx-action v4.1.0@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 → [Updates: v4.2.0]
• docker/metadata-action v6.1.0@80c7e94dd9b9319bd5eb7a0e0fe9291e23a2a2e9 → [Updates: v6.2.0]
• docker/bake-action v7.2.0@6614cfa25eff9a0b2b2697efb0b6159e7680d584 → [Updates: v7.3.0]
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• go 1.26.4 → [Updates: 1.26.5]

.github/workflows/reusable-docs.yml (3)

• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7.0.0]
• astral-sh/setup-uv v5.4.2@d4b2f3b6ecc6e67c4457f6d3e41ec42d3d0fcb86 → [Updates: v8.3.0]
• go-task/setup-task v2.1.0@01a4adf9db2d14c1de7a560f09170b6e0df736aa

.github/workflows/reusable-release-helm.yaml (3)

• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7.0.0]
• docker/login-action v4.2.0@650006c6eb7dba73a995cc03b0b2d7f5ca915bee → [Updates: v4.4.0]
• azure/setup-helm v5.0.1@9bc31f4ebc9c6b171d7bfbaa5d006ae7abdb4310

.github/workflows/reusable-release.yaml (9)

• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7.0.0]
• go-task/setup-task v2.1.0@01a4adf9db2d14c1de7a560f09170b6e0df736aa
• actions/setup-go v6.5.0@924ae3a1cded613372ab5595356fb5720e22ba16
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• softprops/action-gh-release v2.6.2@3bb12739c298aeb8a4eeaf626c5b8d85266b0e65 → [Updates: v3.0.1]
• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7.0.0]
• actions/download-artifact v8.0.1@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• softprops/action-gh-release v2.6.2@3bb12739c298aeb8a4eeaf626c5b8d85266b0e65 → [Updates: v3.0.1]
• go 1.26.4 → [Updates: 1.26.5]

.github/workflows/reusable-test-e2e-cross-platform.yaml (5)

• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7.0.0]
• go-task/setup-task v2.1.0@01a4adf9db2d14c1de7a560f09170b6e0df736aa
• sigstore/cosign-installer v4.1.2@6f9f17788090df1f26f669e9d70d6ae9567deba6
• actions/setup-go v6.5.0@924ae3a1cded613372ab5595356fb5720e22ba16
• go 1.26.4 → [Updates: 1.26.5]

.github/workflows/reusable-test-e2e.yaml (9)

• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7.0.0]
• docker/login-action v4.2.0@650006c6eb7dba73a995cc03b0b2d7f5ca915bee → [Updates: v4.4.0]
• go-task/setup-task v2.1.0@01a4adf9db2d14c1de7a560f09170b6e0df736aa
• sigstore/cosign-installer v4.1.2@6f9f17788090df1f26f669e9d70d6ae9567deba6
• actions/setup-go v6.5.0@924ae3a1cded613372ab5595356fb5720e22ba16
• actions/download-artifact v8.0.1@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• actions/cache v5.0.5@27d5ce7f107fe9357f9df03efb73ab90386fccae → [Updates: v5.1.0, v6.1.0]
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• go 1.26.4 → [Updates: 1.26.5]

.github/workflows/reusable-test.yaml (5)

• actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7.0.0]
• go-task/setup-task v2.1.0@01a4adf9db2d14c1de7a560f09170b6e0df736aa
• actions/setup-go v6.5.0@924ae3a1cded613372ab5595356fb5720e22ba16
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• go 1.26.4 → [Updates: 1.26.5]

gomod (7)

api/go.mod (14)

• go 1.26.4
• buf.build/gen/go/agntcy/oasf-sdk/protocolbuffers/go v1.36.11-20260612113157-d775d6ffb86b.1@d775d6ffb86b → [Updates: v1.36.11-20260703134920-dbfa1736bef5.1]
• buf.build/gen/go/agntcy/oasf/protocolbuffers/go v1.36.11-20260602080720-2b66557c6456.1@2b66557c6456 → [Updates: v1.36.11-20260703134941-ebce38fee5a5.1]
• buf.build/gen/go/bufbuild/protovalidate/protocolbuffers/go v1.36.11-20260415201107-50325440f8f2.1@50325440f8f2 → [Updates: v1.36.11-20260709200747-435963d16310.1]
• github.com/agntcy/oasf-sdk/pkg v1.0.6-0.20260629100853-cc016581c7f5@cc016581c7f5 → [Updates: v1.0.6-0.20260629100853-cc016581c7f5]
• github.com/grpc-ecosystem/grpc-gateway/v2 v2.29.0
• github.com/multiformats/go-multihash v0.2.3
• github.com/opencontainers/go-digest v1.0.0
• github.com/stretchr/testify v1.11.1
• google.golang.org/genproto/googleapis/api v0.0.0-20260622175928-b703f567277d@b703f567277d → [Updates: v0.0.0-20260706201446-f0a921348800]
• google.golang.org/grpc v1.82.0
• google.golang.org/protobuf v1.36.12-0.20260120151049-f2248ac996af@f2248ac996af
• k8s.io/apimachinery v0.36.2
• github.com/ipfs/go-cid v0.6.1 → [Updates: v0.6.2]

cli/go.mod (33)

• go 1.26.4
• github.com/ThalesGroup/crypto11 v1.6.1 → [Updates: v1.6.2]
• github.com/libp2p/go-libp2p v0.48.0
• buf.build/gen/go/agntcy/oasf/protocolbuffers/go v1.36.11-20260602080720-2b66557c6456.1@2b66557c6456 → [Updates: v1.36.11-20260703134941-ebce38fee5a5.1]
• github.com/agntcy/dir-importer v1.4.2-0.20260630074812-d4501aa27c3d@d4501aa27c3d
• github.com/agntcy/dir-mcp v1.3.2
• github.com/agntcy/dir-runtime/discovery v1.3.2
• github.com/agntcy/dir-runtime/server v1.3.2
• github.com/agntcy/dir-runtime/store v1.3.2
• github.com/agntcy/oasf-sdk/pkg v1.0.6-0.20260702111004-a058446d13b7@a058446d13b7 → [Updates: v1.0.6-0.20260702111004-a058446d13b7]
• github.com/briandowns/spinner v1.23.2
• github.com/ipfs/go-cid v0.6.1 → [Updates: v0.6.2]
• github.com/libp2p/go-libp2p v0.48.0
• github.com/mitchellh/mapstructure v1.5.1-0.20231216201459-8508981c8b6c@8508981c8b6c
• github.com/rs/zerolog v1.31.0 → [Updates: v1.35.1]
• github.com/sigstore/cosign/v3 v3.1.1
• github.com/sigstore/sigstore v1.10.8
• github.com/spf13/cobra v1.10.2
• github.com/spf13/pflag v1.0.10
• github.com/spf13/viper v1.21.0
• github.com/stretchr/testify v1.11.1
• golang.org/x/crypto v0.53.0 → [Updates: v0.54.0]
• golang.org/x/mod v0.37.0 → [Updates: v0.38.0]
• google.golang.org/protobuf v1.36.12-0.20260120151049-f2248ac996af@f2248ac996af
• oras.land/oras-go/v2 v2.6.1 → [Updates: v2.6.2]
• github.com/libp2p/go-libp2p-kad-dht v0.41.0
• github.com/multiformats/go-multiaddr v0.16.1
• github.com/pelletier/go-toml/v2 v2.3.1 → [Updates: v2.4.3]
• go.yaml.in/yaml/v3 v3.0.4
• golang.org/x/term v0.44.0 → [Updates: v0.45.0]
• google.golang.org/grpc v1.82.0
• gopkg.in/yaml.v3 v3.0.1
• zotregistry.dev/zot/v2 v2.1.18

client/go.mod (16)

• go 1.26.4
• github.com/ThalesGroup/crypto11 v1.6.1 → [Updates: v1.6.2]
• github.com/mitchellh/mapstructure v1.5.1-0.20231216201459-8508981c8b6c@8508981c8b6c
• github.com/sigstore/cosign/v3 v3.1.1
• github.com/sigstore/protobuf-specs v0.5.1
• github.com/sigstore/sigstore v1.10.8
• github.com/sigstore/sigstore-go v1.2.1 → [Updates: v1.2.2]
• github.com/spf13/viper v1.21.0
• github.com/spiffe/go-spiffe/v2 v2.8.1
• github.com/stretchr/testify v1.11.1
• google.golang.org/grpc v1.82.0
• google.golang.org/protobuf v1.36.12-0.20260120151049-f2248ac996af@f2248ac996af
• github.com/zitadel/oidc/v3 v3.47.5 → [Updates: v3.47.7]
• github.com/google/uuid v1.6.0
• github.com/pkg/browser v0.0.0-20240102092130-5ac0b6a4141c@5ac0b6a4141c
• go.yaml.in/yaml/v3 v3.0.4

reconciler/go.mod (10)

• go 1.26.4
• github.com/ThalesGroup/crypto11 v1.6.1 → [Updates: v1.6.2]
• github.com/agntcy/oasf-sdk/pkg v1.0.6-0.20260629100853-cc016581c7f5@cc016581c7f5 → [Updates: v1.0.6-0.20260629100853-cc016581c7f5]
• github.com/csirmazbendeguz/regclient v0.0.0-20260429082137-82ab6d426079@82ab6d426079
• github.com/sigstore/sigstore v1.10.8
• github.com/spf13/viper v1.21.0
• github.com/stretchr/testify v1.11.1
• google.golang.org/grpc v1.82.0
• gopkg.in/yaml.v3 v3.0.1
• oras.land/oras-go/v2 v2.6.1 → [Updates: v2.6.2]

samples/ard-over-ads/go.mod (7)

• go 1.26.4
• github.com/ThalesGroup/crypto11 v1.6.1 → [Updates: v1.6.2]
• buf.build/gen/go/agntcy/oasf/protocolbuffers/go v1.36.11-20260602080720-2b66557c6456.1@2b66557c6456 → [Updates: v1.36.11-20260703134941-ebce38fee5a5.1]
• github.com/opencontainers/go-digest v1.0.0
• github.com/sigstore/cosign/v3 v3.1.1
• google.golang.org/protobuf v1.36.12-0.20260120151049-f2248ac996af@f2248ac996af
• oras.land/oras-go/v2 v2.6.1 → [Updates: v2.6.2]

server/go.mod (38)

• go 1.26.4
• github.com/ThalesGroup/crypto11 v1.6.1 → [Updates: v1.6.2]
• buf.build/gen/go/agntcy/oasf/protocolbuffers/go v1.36.11-20260602080720-2b66557c6456.1@2b66557c6456 → [Updates: v1.36.11-20260703134941-ebce38fee5a5.1]
• buf.build/go/protovalidate v1.2.0
• github.com/agntcy/oasf-sdk/pkg v1.0.6-0.20260629100853-cc016581c7f5@cc016581c7f5 → [Updates: v1.0.6-0.20260629100853-cc016581c7f5]
• github.com/casbin/casbin/v2 v2.135.0 → [Updates: v3.10.0]
• github.com/glebarez/sqlite v1.11.0
• github.com/grpc-ecosystem/go-grpc-middleware/v2 v2.3.3
• github.com/grpc-ecosystem/go-grpc-prometheus v1.2.0
• github.com/grpc-ecosystem/grpc-gateway/v2 v2.29.0
• github.com/ipfs/go-datastore v0.9.2
• github.com/lestrrat-go/jwx/v2 v2.1.6 → [Updates: v2.1.7, v4.1.0]
• github.com/libp2p/go-libp2p v0.48.0
• github.com/libp2p/go-libp2p-gorpc v0.6.0
• github.com/libp2p/go-libp2p-kad-dht v0.41.0
• github.com/libp2p/go-libp2p-pubsub v0.16.0 → [Updates: v0.17.0]
• github.com/libp2p/go-libp2p-record v0.3.1
• github.com/mitchellh/mapstructure v1.5.1-0.20231216201459-8508981c8b6c@8508981c8b6c
• github.com/opencontainers/image-spec v1.1.1
• github.com/spf13/cobra v1.10.2
• github.com/spf13/viper v1.21.0
• github.com/spiffe/go-spiffe/v2 v2.8.1
• github.com/stretchr/testify v1.11.1
• google.golang.org/genproto/googleapis/api v0.0.0-20260622175928-b703f567277d@b703f567277d → [Updates: v0.0.0-20260706201446-f0a921348800]
• google.golang.org/grpc v1.82.0
• google.golang.org/protobuf v1.36.12-0.20260120151049-f2248ac996af@f2248ac996af
• gorm.io/driver/postgres v1.6.0
• gorm.io/gorm v1.31.2
• oras.land/oras-go/v2 v2.6.1 → [Updates: v2.6.2]
• github.com/google/uuid v1.6.0
• github.com/ipfs/go-cid v0.6.1 → [Updates: v0.6.2]
• github.com/ipfs/go-ds-badger v0.3.4
• github.com/multiformats/go-multiaddr v0.16.1
• github.com/multiformats/go-multihash v0.2.3
• github.com/opencontainers/go-digest v1.0.0
• github.com/prometheus/client_golang v1.23.2
• golang.org/x/crypto v0.53.0 → [Updates: v0.54.0]
• golang.org/x/time v0.15.0

utils/go.mod (7)

• go 1.26.4
• buf.build/gen/go/agntcy/oasf/protocolbuffers/go v1.36.11-20260602080720-2b66557c6456.1@2b66557c6456 → [Updates: v1.36.11-20260703134941-ebce38fee5a5.1]
• github.com/mitchellh/mapstructure v1.5.1-0.20231216201459-8508981c8b6c@8508981c8b6c
• github.com/spf13/viper v1.21.0
• github.com/spiffe/go-spiffe/v2 v2.8.1
• github.com/stretchr/testify v1.11.1
• google.golang.org/protobuf v1.36.12-0.20260120151049-f2248ac996af@f2248ac996af

helm-values (3)

install/charts/dir/apiserver/values.yaml

install/charts/dir/values.yaml

install/charts/dirctl/values.yaml

helmv3 (2)

install/charts/dir/apiserver/Chart.yaml (3)

• zot 0.1.118 → [Updates: 0.1.120]
• oasf v0.5.1
• postgresql 18.7.9 → [Updates: 18.7.11]

install/charts/dir/Chart.yaml

regex (4)

install/charts/dir/apiserver/values.yaml (1)

• docker.io/bitnami/postgresql latest@sha256:91a6c3f4b4d687546c1d07c1ef7c27a5e85e2a0ce8a192fe94cad5bbde0a1aba → [Updates: latest]

install/charts/dir/values.yaml (1)

• docker.io/bitnami/postgresql latest@sha256:91a6c3f4b4d687546c1d07c1ef7c27a5e85e2a0ce8a192fe94cad5bbde0a1aba → [Updates: latest]

Taskfile.vars.yml (3)

• github.com/project-zot/zot 2.1.18
• github.com/spiffe/spire 1.15.1 → [Updates: 1.15.2]
• github.com/mikefarah/yq/v4 4.53.3

Taskfile.vars.yml (1)

• docker.io/bitnami/postgresql latest@sha256:91a6c3f4b4d687546c1d07c1ef7c27a5e85e2a0ce8a192fe94cad5bbde0a1aba → [Updates: latest]