Dependency Dashboard

[red-hat-konflux-kflux-prd-rh03]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Repository Problems

Renovate tried to run on this repository, but found these problems.

• ⚠️ WARN: Cannot access vulnerability alerts. Please ensure permissions have been granted.
• ⚠️ WARN: Dependency name is unset, skipping

Abandoned Dependencies

The following dependencies have not received updates for an extended period and may be unmaintained.

View abandoned dependencies (29)

[!NOTE]
Packages are marked as abandoned when they exceed the abandonmentThreshold since their last release. Unlike deprecated packages with official notices, abandonment is detected by release inactivity.

Datasource	Package	Last Updated
gomod	github.com/99designs/go-keychain	2016-01-05
gomod	github.com/99designs/keyring	2022-12-19
gomod	github.com/aymerick/douceur	2015-08-27
gomod	github.com/beorn7/perks	2019-07-31
gomod	github.com/cespare/xxhash/v2	2024-04-04
gomod	github.com/davecgh/go-spew	2018-02-21
gomod	github.com/dvsekhvalnov/jose2go	2024-11-12
gomod	github.com/go-logr/logr	2025-05-19
gomod	github.com/go-task/slim-sprig/v3	2023-09-14
gomod	github.com/godbus/dbus	2017-09-18
gomod	github.com/golang/glog	2025-04-29
gomod	github.com/google/go-cmp	2025-01-14
gomod	github.com/google/uuid	2024-01-23
gomod	github.com/gorilla/css	2023-10-18
gomod	github.com/gsterjov/go-libsecret	2016-10-01
gomod	github.com/inconshreveable/mousetrap	2022-11-27
gomod	github.com/json-iterator/go	2021-09-11
gomod	github.com/mgutz/ansi	2020-07-06
gomod	github.com/microcosm-cc/bluemonday	2024-07-04
gomod	github.com/mitchellh/go-homedir	2019-01-27
gomod	github.com/modern-go/concurrent	2018-03-06
gomod	github.com/modern-go/reflect2	2021-09-11
gomod	github.com/mtibben/percent	2020-04-23
gomod	github.com/munnerz/goautoneg	2019-10-10
gomod	github.com/pmezard/go-difflib	2016-01-10
gomod	github.com/prometheus/client_model	2025-04-11
gomod	github.com/skratchdot/open-golang	2020-01-16
gomod	github.com/subosito/gotenv	2023-08-15
gomod	gopkg.in/yaml.v3	2022-05-27

---

Warning

Renovate failed to look up the following dependencies: Could not determine new digest for update (go package github.com/godbus/dbus).

Files affected: go.mod

---

Other Branches

The following updates are pending. To force the creation of a PR, click on a checkbox below.

• chore(deps): update gomod dependencies to 9cf53c8

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): update konflux references (quay.io/konflux-ci/tekton-catalog/task-sast-shell-check-oci-ta, quay.io/konflux-ci/tekton-catalog/task-sast-snyk-check-oci-ta, quay.io/konflux-ci/tekton-catalog/task-sast-unicode-check-oci-ta)
• chore(deps): update module github.com/cenkalti/backoff/v4 to v7
• chore(deps): update module github.com/golang-jwt/jwt/v4 to v5
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

gomod (1)

go.mod (70)

• go 1.25.9
• github.com/mgutz/ansi v0.0.0-20200706080929-d51e80ef957d@d51e80ef957d
• github.com/onsi/ginkgo/v2 v2.32.0
• github.com/onsi/gomega v1.42.1
• github.com/openshift-online/ocm-common v0.0.44
• github.com/openshift-online/ocm-sdk-go v0.1.504 → [Updates: v0.1.505]
• github.com/sirupsen/logrus v1.9.4
• github.com/spf13/afero v1.15.0
• github.com/spf13/cobra v1.10.2
• github.com/spf13/pflag v1.0.10
• github.com/spf13/viper v1.21.0
• golang.org/x/term v0.44.0
• github.com/99designs/go-keychain v0.0.0-20191008050251-8e49817e8af4@8e49817e8af4 → [Updates: v0.0.0-20191008050251-8e49817e8af4]
• github.com/99designs/keyring v1.2.2
• github.com/Masterminds/semver/v3 v3.5.0
• github.com/aymerick/douceur v0.2.0
• github.com/beorn7/perks v1.0.1
• github.com/cenkalti/backoff/v4 v4.3.0 → [Updates: v7.0.0]
• github.com/cespare/xxhash/v2 v2.3.0
• github.com/danieljoos/wincred v1.2.3
• github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc@d8f796af33cc
• github.com/dvsekhvalnov/jose2go v1.8.0
• github.com/fsnotify/fsnotify v1.10.1
• github.com/go-logr/logr v1.4.3
• github.com/go-task/slim-sprig/v3 v3.0.0
• github.com/go-viper/mapstructure/v2 v2.5.0
• github.com/godbus/dbus v0.0.0-20190726142602-4481cbc300e2@4481cbc300e2
• github.com/godbus/dbus/v5 v5.2.2
• github.com/golang-jwt/jwt/v4 v4.5.2 → [Updates: v5.3.1]
• github.com/golang/glog v1.2.5
• github.com/google/go-cmp v0.7.0
• github.com/google/pprof v0.0.0-20260604005048-7023385849c0@7023385849c0
• github.com/google/uuid v1.6.0
• github.com/gorilla/css v1.0.1
• github.com/gsterjov/go-libsecret v0.0.0-20161001094733-a6f4afe4910c@a6f4afe4910c
• github.com/inconshreveable/mousetrap v1.1.0
• github.com/json-iterator/go v1.1.12
• github.com/mattn/go-colorable v0.1.15
• github.com/mattn/go-isatty v0.0.22
• github.com/microcosm-cc/bluemonday v1.0.27
• github.com/mitchellh/go-homedir v1.1.0
• github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd@bacd9c7ef1dd
• github.com/modern-go/reflect2 v1.0.3-0.20250322232337-35a7c28c31ee@35a7c28c31ee
• github.com/mtibben/percent v0.2.1
• github.com/munnerz/goautoneg v0.0.0-20191010083416-a7dc8b61c822@a7dc8b61c822
• github.com/openshift-online/ocm-api-model/clientapi v0.0.461
• github.com/openshift-online/ocm-api-model/model v0.0.461
• github.com/openshift-online/ocm-cli v1.0.15
• github.com/pelletier/go-toml/v2 v2.4.2 → [Updates: v2.4.3]
• github.com/pmezard/go-difflib v1.0.1-0.20181226105442-5d4384ee4fb2@5d4384ee4fb2
• github.com/prometheus/client_golang v1.23.2
• github.com/prometheus/client_model v0.6.2
• github.com/prometheus/common v0.69.0
• github.com/prometheus/procfs v0.21.1
• github.com/rogpeppe/go-internal v1.15.0
• github.com/sagikazarmark/locafero v0.12.0
• github.com/skratchdot/open-golang v0.0.0-20200116055534-eef842397966@eef842397966
• github.com/spf13/cast v1.10.0
• github.com/subosito/gotenv v1.6.0
• github.com/zalando/go-keyring v0.2.8
• go.yaml.in/yaml/v3 v3.0.4
• golang.org/x/mod v0.37.0
• golang.org/x/net v0.56.0
• golang.org/x/oauth2 v0.36.0
• golang.org/x/sync v0.21.0
• golang.org/x/sys v0.46.0
• golang.org/x/text v0.39.0
• golang.org/x/tools v0.47.0
• google.golang.org/protobuf v1.36.11
• gopkg.in/yaml.v3 v3.0.1

tekton (7)

.tekton/ocm-container-micro-pull-request.yaml

.tekton/ocm-container-micro-push.yaml

.tekton/ocm-container-minimal-pull-request.yaml

.tekton/ocm-container-minimal-push.yaml

.tekton/ocm-container-pull-request.yaml

.tekton/ocm-container-push.yaml

.tekton/pipeline-pull-request-build-image.yaml (18)

• quay.io/konflux-ci/tekton-catalog/task-init 0.4@sha256:5a423246792ac501ea279229b42ee57da9927da441c04b5c9ff86817b0856b08
• quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta 0.2@sha256:12cbcf0b408e906f84e7eb3c62c6cd618e2b1f78a40218e10940fbaf2c45455d
• quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta 0.3@sha256:92956e75cd4714286f9c0c043f5301d1c0df1d750884edeceee87e0a91cc1975
• quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta 0.10@sha256:c77892be9e7217b9baa9abdbaf432c16ee49c30601b6b25cfbc9d704295c58ef
• quay.io/konflux-ci/tekton-catalog/task-build-image-index 0.3@sha256:70c52e88e737340e7b58418fda38c13273aa7cdf587b825778e3560aca1d1133
• quay.io/konflux-ci/tekton-catalog/task-source-build-oci-ta 0.3@sha256:7c5575ac8e292f27f57716c021ab0324460dc958e73946724c588c5228e5f372
• quay.io/konflux-ci/tekton-catalog/task-deprecated-image-check 0.5@sha256:e78d0d3baf3c8cfc1a5ad278196b74032d9568b143a87c7a79ab780fedfb296e
• quay.io/konflux-ci/tekton-catalog/task-clair-scan 0.3@sha256:9ff424d913dd7681031a93d8bdbed622cd5536633f8ed0dbb4a9021055cf9d21
• quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks 0.2@sha256:3c4f60ebda2225eff6a6bc387d9bbd443f1264d756bf385f97cc684992e904a0
• quay.io/konflux-ci/tekton-catalog/task-sast-snyk-check-oci-ta 0.5@sha256:fda2e510511f5588de3882612f53eb06ea833889bc47da3d60ef7273555067bc → [Updates: 0.5]
• quay.io/konflux-ci/tekton-catalog/task-clamav-scan 0.3@sha256:53a02326bfb930ca5ef6bfa7a33acca833d57752f34f3cb79255fe2e25e7d217
• quay.io/konflux-ci/tekton-catalog/task-sast-coverity-check-oci-ta 0.3@sha256:e92d00ed858233d0096627861192d3e4fc013cf1559c0d0b0ea0657d3377ce75
• quay.io/konflux-ci/tekton-catalog/task-coverity-availability-check 0.2@sha256:8b501440a960aec446db2ebc6625a49d0317a9fc7bf0f7bd9b18cb63052db7de
• quay.io/konflux-ci/tekton-catalog/task-sast-shell-check-oci-ta 0.1@sha256:fc685d6f7dfb7c9ab2f2db38bbe2c8d383407847350ccd8b96352322c487b13c → [Updates: 0.1]
• quay.io/konflux-ci/tekton-catalog/task-sast-unicode-check-oci-ta 0.4@sha256:5807ffe3a0cca5cf970076bbc7a404642cc6e3eebe64e9e5e6a4f20da740bf73 → [Updates: 0.4]
• quay.io/konflux-ci/tekton-catalog/task-apply-tags 0.3@sha256:3ab844157eccd68e95e4852adc06c3c4ea674edb7865a474b0a898227f2893d6
• quay.io/konflux-ci/tekton-catalog/task-push-dockerfile-oci-ta 0.3@sha256:f3e97e6eaf09d6585e915c3e7b82d110d97e34202bf591a2d990127ba5bb362d
• quay.io/konflux-ci/tekton-catalog/task-rpms-signature-scan 0.2@sha256:65370ccb44ff82e4ce128addd913f3c96b298607b3760ee1339ed10011a4bd6b