Dependency Dashboard 🤖

[cluster-stack-bot]

Config Migration Needed

• Select this checkbox to let Renovate create an automated Config Migration PR.

Repository problems

Renovate tried to run on this repository, but found these problems.

• WARN: Package lookup failures

Edited/Blocked

These updates have been manually edited so Renovate will no longer make changes. To discard all commits and start over, click on a checkbox.

• 🌱 Update Update Golang Dependencies group (patch) (github.com/onsi/ginkgo/v2, github.com/onsi/gomega, go, sigs.k8s.io/controller-runtime)

---

Warning

Renovate failed to look up the following dependencies: Could not determine new digest for update (go package github.com/go-task/slim-sprig).

Files affected: go.mod

---

Open

These updates have all been created already. Click a checkbox below to force a retry/rebase of any.

• 🌱 Update Github Actions group to v41.0.9
• 🌱 Update image docker.io/library/alpine to v3.20.5
• 🌱 Update Builder Image group (docker.io/aquasec/trivy, docker.io/library/alpine, docker.io/library/golang, golangci/golangci-lint, helm/helm)
• 🌱 Update Cso Image group (docker.io/alpine/helm, docker.io/library/alpine, docker.io/library/golang)
• 🌱 Update Update Golang Dependencies group (minor) (golang.org/x/oauth2, sigs.k8s.io/kind)
• 🌱 Update github-actions group (minor) (actions/cache, actions/create-github-app-token, actions/setup-go, actions/upload-artifact, docker/build-push-action, docker/setup-buildx-action, docker/setup-qemu-action, softprops/action-gh-release)
• 🌱 Update image docker.io/library/alpine to v3.21.2
• Click on this checkbox to rebase all open PRs at once

Detected dependencies

dockerfile

images/builder/Dockerfile

• docker.io/library/alpine 3.20.3
• docker.io/library/alpine 3.20.3
• docker.io/hadolint/hadolint v2.12.0-alpine@sha256:3c206a451cec6d486367e758645269fd7d696c5ccb6ff59d8b03b0e45268a199
• docker.io/aquasec/trivy 0.57.1
• docker.io/library/golang 1.23.3-bullseye

images/cache/Dockerfile

• docker.io/library/alpine 3.20.3@sha256:1e42bbe2508154c9126d48c2b8a75420c3544343bf86fd041fb7527e017a4b4a
• docker.io/library/alpine 3.20.3@sha256:1e42bbe2508154c9126d48c2b8a75420c3544343bf86fd041fb7527e017a4b4a

images/cso/Dockerfile

• docker.io/alpine/helm 3.16.3
• docker.io/library/golang 1.23.3-bullseye
• docker.io/library/alpine 3.20.3

github-actions

.github/actions/metadata/action.yaml

• docker/metadata-action v5.6.1@369eb591f429131d6889c46b94e711f089e6ca96

.github/actions/setup-go/action.yaml

• actions/setup-go v5.1.0@41dfa10bad2bb2ae585af6ee5bb4d7d973ad74ed
• actions/cache v4@6849a6489940f00c2f30c0fb92c6274307ccb58a
• actions/cache v4@6849a6489940f00c2f30c0fb92c6274307ccb58a

.github/workflows/build.yml

• actions/checkout v4@11bd71901bbe5b1630ceea73d27597364c9af683
• docker/setup-qemu-action v3@49b3bc8e6bdd4a60e6116a5414239cba5943d3cf
• docker/setup-buildx-action v3@c47758b77c9736f4b2ef4073d4d51994fabfe349
• docker/login-action v3.3.0@9780b0c442fbb1117ed29e0efdff1e18412f7567
• sigstore/cosign-installer v3.7.0@dc72c7d5c4d10cd6bcb8cf6e3fd625a9e5e537da
• actions/cache v4.1.2@6849a6489940f00c2f30c0fb92c6274307ccb58a
• docker/build-push-action v6.10.0@48aba3b46d1b1fec4febb7c5d0c644b249a11355
• docker/build-push-action v6@48aba3b46d1b1fec4febb7c5d0c644b249a11355
• actions/upload-artifact v4.4.3@b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882
• docker/build-push-action v6.10.0@48aba3b46d1b1fec4febb7c5d0c644b249a11355

.github/workflows/kubebuilder-markers-checker.yml

• actions/checkout v4@11bd71901bbe5b1630ceea73d27597364c9af683
• ubuntu 24.04

.github/workflows/pr-lint.yml

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• ghcr.io/sovereigncloudstack/cso-builder 1.1.25

.github/workflows/pr-verify.yml

• kubernetes-sigs/kubebuilder-release-tools v0.4.3@012269a88fa4c034a0acf1ba84c26b195c0dbab4
• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683

.github/workflows/release.yml

• actions/checkout v4@11bd71901bbe5b1630ceea73d27597364c9af683
• docker/setup-qemu-action v3@49b3bc8e6bdd4a60e6116a5414239cba5943d3cf
• docker/setup-buildx-action v3@c47758b77c9736f4b2ef4073d4d51994fabfe349
• docker/login-action v3.3.0@9780b0c442fbb1117ed29e0efdff1e18412f7567
• sigstore/cosign-installer v3.7.0@dc72c7d5c4d10cd6bcb8cf6e3fd625a9e5e537da
• docker/build-push-action v6@48aba3b46d1b1fec4febb7c5d0c644b249a11355
• actions/upload-artifact v4.4.3@b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882
• actions/checkout v4@11bd71901bbe5b1630ceea73d27597364c9af683
• softprops/action-gh-release v2@e7a8f85e1c67a31e6ed99a94b41bd0b71bbee6b8

.github/workflows/schedule-cache-cleaner-cso-image.yml

• actions/cache v4.1.2@6849a6489940f00c2f30c0fb92c6274307ccb58a
• ubuntu 24.04

.github/workflows/schedule-scan-image.yml

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• ghcr.io/sovereigncloudstack/cso-builder 1.1.25

.github/workflows/schedule-update-bot.yaml

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/create-github-app-token v1@5d869da34e18e7287c1daad50e0b8ea0f506ce69
• renovatebot/github-action v41.0.5@936628dfbff213ab2eb95033c5e123cfcaf09ebb

.github/workflows/test.yml

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683

gomod

go.mod

• go 1.22.0
• go 1.23.3
• github.com/go-logr/logr v1.4.2
• github.com/go-task/slim-sprig v0.0.0-20230315185526-52ccab3ef572@52ccab3ef572
• github.com/google/cel-go v0.22.1
• github.com/google/go-github/v52 v52.0.0
• github.com/onsi/ginkgo/v2 v2.22.0
• github.com/onsi/gomega v1.36.0
• github.com/stretchr/testify v1.10.0
• golang.org/x/mod v0.22.0
• golang.org/x/oauth2 v0.24.0
• oras.land/oras-go/v2 v2.5.0
• sigs.k8s.io/controller-runtime v0.18.5
• sigs.k8s.io/kind v0.25.0
• github.com/go-logr/zapr v1.3.0
• github.com/gobuffalo/flect v1.0.3
• go.uber.org/zap v1.27.0
• gopkg.in/yaml.v3 v3.0.1

regex

images/builder/Dockerfile

• lycheeverse/lychee v0.15.1
• lycheeverse/lychee v0.15.1
• helm/helm v3.16.3
• golangci/golangci-lint v1.62.2
• adrienverge/yamllint v1.35.1
• opt-nc/yamlfixer 0.9.15