Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Repository Problems

These problems occurred while renovating this repository. View logs.

• ⚠️ WARN: Package lookup failures

Note

These dependencies have not received updates for an extended period and may be unmaintained:

View abandoned dependencies (4)

Datasource	Name	Last Updated
gomod	github.com/blang/semver	2017-07-27
gomod	github.com/ghodss/yaml	2017-03-27
gomod	github.com/google/martian	2018-09-28
gomod	github.com/pkg/errors	2020-01-14

Packages are marked as abandoned when they exceed the abandonmentThreshold since their last release.
Unlike deprecated packages with official notices, abandonment is detected by release inactivity.

Pending Approval

The following branches are pending approval. To create them, click on a checkbox below.

• fix(deps): update k8s.io/utils digest to 914a6e7
• fix(deps): update golang.org/x deps (golang.org/x/crypto, golang.org/x/exp, golang.org/x/mod)
• fix(deps): update module github.com/google/go-github/v35 to v81
• 🔐 Create all pending approval PRs at once 🔐

---

Warning

Renovate failed to look up the following dependencies: Failed to look up go package example.com/core, Failed to look up go package example.org/somedependency, Failed to look up go package example.com/localreplace, Failed to look up go package example.org/someotherdependency, Failed to look up go package example.org/adep.

Files affected: validate-gomod-test/broken/cmd/acmesolver/go.mod, validate-gomod-test/broken/cmd/cainjector/go.mod, validate-gomod-test/broken/cmd/controller/go.mod, validate-gomod-test/broken/cmd/ctl/go.mod, validate-gomod-test/broken/cmd/nodummy/go.mod, validate-gomod-test/broken/cmd/somebinary/go.mod, validate-gomod-test/broken/cmd/webhook/go.mod, validate-gomod-test/broken/go.mod, validate-gomod-test/valid/cmd/acmesolver/go.mod, validate-gomod-test/valid/cmd/cainjector/go.mod, validate-gomod-test/valid/cmd/controller/go.mod, validate-gomod-test/valid/cmd/ctl/go.mod, validate-gomod-test/valid/cmd/directimport/go.mod, validate-gomod-test/valid/cmd/nodummy/go.mod, validate-gomod-test/valid/cmd/webhook/go.mod, validate-gomod-test/valid/go.mod

---

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): pin dependencies (gcr.io/cloud-builders/git, nginx)
• chore(deps): update docker.io/library/golang:1.25-alpine docker digest to e689855
• chore(deps): update gcr.io/cloud-builders/docker:24.0.9 docker digest to cc0e9f1
• fix(deps): update misc go deps (cloud.google.com/go/storage, helm.sh/helm/v3)
• fix(deps): update module google.golang.org/api to v0.260.0
• fix(deps): update module helm.sh/helm/v3 to v4
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

cloudbuild (3)

gcb/bootstrap-pgp/cloudbuild.yaml (1)

• docker.io/library/golang 1.25-alpine@sha256:ac09a5f469f307e5da71e766b0bd59c9c49ea460a528cc3e6686513d64a6f1fb → [Updates: 1.25-alpine]

gcb/makestage/cloudbuild.yaml (1)

• gcr.io/cloud-builders/git unknown version → [Updates: undefined]

gcb/publish/cloudbuild.yaml (4)

• docker.io/library/golang 1.25-alpine@sha256:ac09a5f469f307e5da71e766b0bd59c9c49ea460a528cc3e6686513d64a6f1fb → [Updates: 1.25-alpine]
• docker.io/library/golang 1.25-alpine@sha256:ac09a5f469f307e5da71e766b0bd59c9c49ea460a528cc3e6686513d64a6f1fb → [Updates: 1.25-alpine]
• gcr.io/cloud-builders/docker 24.0.9@sha256:0a0708af62dd36ffb17812a66627d6584b8a765841d571d7ca8e3449bfe26d93 → [Updates: 24.0.9]
• gcr.io/cloud-builders/docker 24.0.9@sha256:0a0708af62dd36ffb17812a66627d6584b8a765841d571d7ca8e3449bfe26d93 → [Updates: 24.0.9]

gomod (17)

go.mod (20)

• go 1.25.0
• cloud.google.com/go/storage v1.59.0 → [Updates: v1.59.1]
• github.com/blang/semver v3.5.1+incompatible
• github.com/cenkalti/backoff/v5 v5.0.3
• github.com/ghodss/yaml v1.0.0
• github.com/google/go-github/v35 v35.3.0 → [Updates: v81.0.0]
• github.com/google/martian v2.1.0+incompatible
• github.com/pkg/errors v0.9.1
• github.com/spf13/cobra v1.10.2
• github.com/spf13/pflag v1.0.10
• github.com/stretchr/testify v1.11.1
• golang.org/x/crypto v0.46.0 → [Updates: v0.47.0]
• golang.org/x/exp v0.0.0-20251209150349-8475f28825e9@8475f28825e9 → [Updates: v0.0.0-20260112195511-716be5621a96]
• golang.org/x/mod v0.31.0 → [Updates: v0.32.0]
• golang.org/x/oauth2 v0.34.0
• google.golang.org/api v0.259.0 → [Updates: v0.260.0]
• helm.sh/helm/v3 v3.19.4 → [Updates: v3.19.5, v4.0.5]
• k8s.io/apimachinery v0.35.0
• k8s.io/utils v0.0.0-20251002143259-bc988d571ff4@bc988d571ff4 → [Updates: v0.0.0-20260108192941-914a6e750570]
• sigs.k8s.io/yaml v1.6.0

validate-gomod-test/broken/cmd/acmesolver/go.mod (2)

• go 1.18
• example.com/core v0.0.0-00010101000000-000000000000@000000000000

validate-gomod-test/broken/cmd/cainjector/go.mod (2)

• go 1.21.3
• example.com/core v0.0.0-00010101000000-000000000000@000000000000

validate-gomod-test/broken/cmd/controller/go.mod (3)

• go 1.21.3
• example.com/core v0.0.0-00010101000000-000000000000@000000000000
• example.org/somedependency v1.1.1

validate-gomod-test/broken/cmd/ctl/go.mod (3)

• go 1.21.3
• example.com/core v0.0.0-00010101000000-000000000000@000000000000
• example.org/somedependency v1.1.1

validate-gomod-test/broken/cmd/nodummy/go.mod (2)

• go 1.21.3
• example.com/core v1.2.3

validate-gomod-test/broken/cmd/somebinary/go.mod (2)

• go 1.21.3
• example.com/core v0.0.0-00010101000000-000000000000@000000000000

validate-gomod-test/broken/cmd/webhook/go.mod (3)

• go 1.21.3
• example.com/core v0.0.0-00010101000000-000000000000@000000000000
• example.org/somedependency v1.1.1

validate-gomod-test/broken/go.mod (4)

• go 1.21.3
• example.com/localreplace v0.0.1
• example.org/somedependency v1.1.1
• example.org/someotherdependency v1.5.5

validate-gomod-test/valid/cmd/acmesolver/go.mod (2)

• go 1.21.3
• example.com/core v0.0.0-00010101000000-000000000000@000000000000

validate-gomod-test/valid/cmd/cainjector/go.mod (2)

• go 1.21.3
• example.com/core v0.0.0-00010101000000-000000000000@000000000000

validate-gomod-test/valid/cmd/controller/go.mod (3)

• go 1.21.3
• example.com/core v0.0.0-00010101000000-000000000000@000000000000
• example.org/somedependency v1.1.1

validate-gomod-test/valid/cmd/ctl/go.mod (2)

• go 1.21.3
• example.com/core v0.0.0-00010101000000-000000000000@000000000000

validate-gomod-test/valid/cmd/directimport/go.mod (2)

• go 1.21.3
• example.com/core v1.2.3

validate-gomod-test/valid/cmd/nodummy/go.mod (2)

• go 1.21.3
• example.com/core v1.2.3

validate-gomod-test/valid/cmd/webhook/go.mod (2)

• go 1.21.3
• example.com/core v0.0.0-00010101000000-000000000000@000000000000

validate-gomod-test/valid/go.mod (4)

• go 1.21.3
• example.org/adep v0.0.1
• example.org/somedependency v1.1.1
• example.org/someotherdependency v1.5.5

helm-values (1)

pkg/release/helm/testdata/cert-manager/values.yaml (1)

• nginx unknown version → [Updates: ``]

renovate-config-presets (1)

.github/renovate.json

---

• Check this box to trigger a request for Renovate to run again on this repository