Dependency Dashboard

[felix-renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• chore(deps): update actions/checkout action to v7
• chore(deps): update actions/setup-go action to v7
• chore(deps): update astral-sh/setup-uv action to v9
• 🔐 Create all rate-limited PRs at once 🔐

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): update go toolchain directive to v1.26.5 [security]
• chore(deps): update module go.opentelemetry.io/otel to v1.41.0 [security]
• chore(deps): update module golang.org/x/crypto to v0.52.0 [security]
• chore(deps): update module golang.org/x/net to v0.56.0 [security]
• chore(deps): update module golang.org/x/sys to v0.44.0 [security]
• chore(deps): update module golang.org/x/text to v0.39.0 [security]
• chore(deps): update module google.golang.org/grpc to v1.82.1 [security]
• fix(deps): update all non-major dependencies (actions/checkout, actions/setup-go, astral-sh/setup-uv, docker/dockerfile, github.com/aws/aws-sdk-go-v2, github.com/aws/aws-sdk-go-v2/config, github.com/aws/aws-sdk-go-v2/service/ec2, github.com/go-logr/logr, github/codeql-action, go, golangci/golangci-lint-action, google.golang.org/api, k8s.io/api, k8s.io/apimachinery, k8s.io/client-go, k8s.io/utils, pscale.dev/wolfi-prod/go)
• chore(deps): update docker/build-push-action action to v7
• chore(deps): update docker/login-action action to v4
• chore(deps): update docker/setup-buildx-action action to v4
• Click on this checkbox to rebase all open PRs at once

Vulnerabilities

Important

66/67 CVEs have Renovate fixes.

gomod

go.mod

golang.org/x/crypto

• GO-2026-5932

Detected Dependencies

dockerfile (1)

Dockerfile (2)

• docker/dockerfile 1.21@sha256:27f9262d43452075f3c410287a2c43f5ef1bf7ec2bb06e8c9eeb1b8d453087bc → [Updates: 1.25]
• pscale.dev/wolfi-prod/go 1.25 → [Updates: 1.26]

github-actions (5)

.github/workflows/ci.yaml (5)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v7, v6]
• actions/setup-go v6@7a3fe6cf4cb3a834922a1244abfce67bcef6a0c5 → [Updates: v7, v6]
• golangci/golangci-lint-action v9@1e7e51e771db61008b38414a730f564565cf7c20 → [Updates: v9]
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v7, v6]
• actions/setup-go v6@7a3fe6cf4cb3a834922a1244abfce67bcef6a0c5 → [Updates: v7, v6]

.github/workflows/licensing.yaml (1)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v7, v6]

.github/workflows/release.yaml (4)

• docker/login-action v3@c94ce9fb468520275223c153574b00df6fe4bcc9 → [Updates: v4]
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v7, v6]
• docker/setup-buildx-action v3@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f → [Updates: v4]
• docker/build-push-action v6@10e90e3645eae34f1e60eeb005ba3a3d33f178e8 → [Updates: v7]

.github/workflows/validate-renovate.yml (2)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v7, v6]
• ghcr.io/renovatebot/renovate 44.13.1@sha256:3e4149122921d530218a4ca809c59636faa668b330e4c9ea7f9ee1e20ea505dd → [Updates: 44.14.12]

.github/workflows/zizmor.yaml (3)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v7, v6]
• astral-sh/setup-uv v7@eac588ad8def6316056a12d4907a9d4d84ff7a3b → [Updates: v9.0.0, v7]
• github/codeql-action v4@9e907b5e64f6b83e7804b09294d44122997950d6 → [Updates: v4]

gomod (1)

go.mod (19)

• go 1.25.0 → [Updates: 1.26.5]
• go 1.26.0 → [Updates: 1.26.5]
• github.com/aws/aws-sdk-go-v2 v1.41.1 → [Updates: v1.43.0]
• github.com/aws/aws-sdk-go-v2/config v1.32.7 → [Updates: v1.32.31]
• github.com/aws/aws-sdk-go-v2/service/ec2 v1.289.0 → [Updates: v1.317.0]
• github.com/go-logr/logr v1.4.3 → [Updates: v1.4.4]
• github.com/stretchr/testify v1.11.1
• google.golang.org/api v0.266.0 → [Updates: v0.290.0]
• k8s.io/api v0.34.6 → [Updates: v0.34.10]
• k8s.io/apimachinery v0.34.6 → [Updates: v0.34.10]
• k8s.io/client-go v0.34.6 → [Updates: v0.34.10]
• k8s.io/utils v0.0.0-20260210185600-b8788abfbbc2@b8788abfbbc2 → [Updates: v0.0.0-20260210185600-b8788abfbbc2]
• sigs.k8s.io/controller-runtime v0.22.5
• go.opentelemetry.io/otel v1.39.0 → [Updates: v1.41.0]
• golang.org/x/crypto v0.47.0 → [Updates: v0.52.0]
• golang.org/x/net v0.49.0 → [Updates: v0.56.0]
• golang.org/x/sys v0.40.0 → [Updates: v0.44.0]
• golang.org/x/text v0.33.0 → [Updates: v0.39.0]
• google.golang.org/grpc v1.79.3 → [Updates: v1.82.1]

renovate-config (1)

renovate.json5

---

• Check this box to trigger a request for Renovate to run again on this repository