Dependency Dashboard

[renovate-sh-app]

ℹ️ Note

This PR body was truncated due to platform limits.

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Repository Problems

Renovate tried to run on this repository, but found these problems.

• ⚠️ WARN: Package lookup failures

Abandoned Dependencies

The following dependencies have not received updates for an extended period and may be unmaintained.

View abandoned dependencies (132)

[!NOTE]
Packages are marked as abandoned when they exceed the abandonmentThreshold since their last release. Unlike deprecated packages with official notices, abandonment is detected by release inactivity.

Datasource	Package	Last Updated
gomod	github.com/alingse/asasalint	2022-07-22
gomod	github.com/bahlo/generic-list-go	2022-02-08
gomod	github.com/bboreham/go-loser	2023-09-20
gomod	github.com/beorn7/perks	2019-07-31
gomod	github.com/blizzy78/varnamelen	2022-03-29
gomod	github.com/cespare/xxhash/v2	2024-04-04
gomod	github.com/coreos/go-semver	2023-01-16
gomod	github.com/cristalhq/hedgedhttp	2023-09-15
gomod	github.com/davecgh/go-spew	2018-02-21
gomod	github.com/dennwc/varint	2019-06-16
gomod	github.com/dnephin/pflag	2021-02-20
gomod	github.com/drone/envsubst	2021-06-16
gomod	github.com/dustin/go-humanize	2023-01-10
gomod	github.com/elastic/go-grok	2024-08-08
gomod	github.com/ettle/strcase	2023-01-14
gomod	github.com/facette/natsort	2018-12-10
gomod	github.com/fatih/structtag	2019-12-06
gomod	github.com/fzipp/gocyclo	2022-06-15
gomod	github.com/go-kit/log	2022-04-27
gomod	github.com/go-logr/stdr	2021-12-14
gomod	github.com/go-ole/go-ole	2023-08-04
gomod	github.com/go-toolsmith/astcast	2023-02-05
gomod	github.com/go-toolsmith/astcopy	2023-02-05
gomod	github.com/go-toolsmith/astequal	2024-01-02
gomod	github.com/go-toolsmith/astfmt	2023-02-05
gomod	github.com/go-toolsmith/astp	2023-02-05
gomod	github.com/go-toolsmith/strparse	2023-02-04
gomod	github.com/go-toolsmith/typep	2023-02-04
gomod	github.com/gobwas/glob	2018-02-08
gomod	github.com/gogo/googleapis	2021-03-10
gomod	github.com/gogo/protobuf	2021-01-10
gomod	github.com/gogo/status	2022-04-23
gomod	github.com/golang/protobuf	2024-03-06
gomod	github.com/golang/snappy	2023-12-25
gomod	github.com/google/shlex	2019-12-02
gomod	github.com/google/uuid	2024-01-23
gomod	github.com/gorilla/mux	2023-10-18
gomod	github.com/gostaticanalysis/analysisutil	2021-03-18
gomod	github.com/grafana/e2e	2023-09-19
gomod	github.com/grafana/memberlist	2021-11-12
gomod	github.com/hashicorp/errwrap	2020-07-14
gomod	github.com/hashicorp/go-cleanhttp	2021-02-03
gomod	github.com/hashicorp/go-hclog	2024-04-01
gomod	github.com/hashicorp/go-immutable-radix	2023-11-21
gomod	github.com/hashicorp/go-immutable-radix/v2	2023-11-21
gomod	github.com/hashicorp/go-multierror	2021-03-11
gomod	github.com/hashicorp/go-rootcerts	2019-12-10
gomod	github.com/hashicorp/go-uuid	2022-04-08
gomod	github.com/hashicorp/golang-lru	2023-09-21
gomod	github.com/hashicorp/golang-lru/v2	2023-09-21
gomod	github.com/hexops/gotextdiff	2020-12-13
gomod	github.com/iancoleman/strcase	2023-07-13
gomod	github.com/inconshreveable/mousetrap	2022-11-27
gomod	github.com/jcmturner/aescts/v2	2020-02-04
gomod	github.com/jcmturner/dnsutils/v2	2020-02-04
gomod	github.com/jcmturner/gofork	2022-07-26
gomod	github.com/jcmturner/gokrb5/v8	2023-02-25
gomod	github.com/jcmturner/rpc/v2	2020-11-12
gomod	github.com/jpillora/backoff	2019-10-03
gomod	github.com/json-iterator/go	2021-09-11
gomod	github.com/jsternberg/zap-logfmt	2022-08-23
gomod	github.com/julienschmidt/httprouter	2019-09-29
gomod	github.com/kylelemons/godebug	2019-05-05
gomod	github.com/leonklingele/grouper	2024-04-01
gomod	github.com/matttproud/golang_protobuf_extensions	2022-10-25
gomod	github.com/minio/md5-simd	2021-01-07
gomod	github.com/mitchellh/copystructure	2021-05-05
gomod	github.com/mitchellh/go-homedir	2019-01-27
gomod	github.com/mitchellh/mapstructure	2022-04-20
gomod	github.com/mitchellh/reflectwalk	2021-05-03
gomod	github.com/modern-go/concurrent	2018-03-06
gomod	github.com/modern-go/reflect2	2021-09-11
gomod	github.com/moricho/tparallel	2024-06-26
gomod	github.com/muesli/cancelreader	2022-06-22
gomod	github.com/munnerz/goautoneg	2019-10-10
gomod	github.com/mwitkow/go-conntrack	2019-07-16
gomod	github.com/nakabonne/nestif	2021-10-31
gomod	github.com/nishanths/exhaustive	2023-11-11
gomod	github.com/nishanths/predeclared	2022-04-04
gomod	github.com/opentracing/opentracing-go	2020-07-01
gomod	github.com/openzipkin/zipkin-go	2024-04-29
gomod	github.com/pbnjay/memory	2021-07-28
gomod	github.com/pkg/browser	2024-01-02
gomod	github.com/pkg/errors	2020-01-14
gomod	github.com/planetscale/vtprotobuf	2024-01-29
gomod	github.com/pmezard/go-difflib	2016-01-10
gomod	github.com/psampaz/go-mod-outdated	2023-02-19
gomod	github.com/quasilyte/gogrep	2022-10-02
gomod	github.com/quasilyte/regex/syntax	2021-08-19
gomod	github.com/quasilyte/stdinfo	2022-01-14
gomod	github.com/rivo/uniseg	2024-02-08
gomod	github.com/sashamelentyev/interfacebloat	2022-08-20
gomod	github.com/sean-/seed	2017-03-13
gomod	github.com/segmentio/fasthash	2020-05-27
gomod	github.com/sivchari/containedctx	2023-03-24
gomod	github.com/sourcegraph/conc	2023-02-25
gomod	github.com/spf13/jwalterweatherman	2018-10-28
gomod	github.com/ssgreg/nlreturn/v2	2021-09-17
gomod	github.com/subosito/gotenv	2023-08-15
gomod	github.com/tommy-muehle/go-mnd/v2	2022-10-07
gomod	github.com/twitchyliquid64/golang-asm	2021-01-12
gomod	github.com/twmb/franz-go/pkg/sasl/kerberos	2022-08-22
gomod	github.com/twmb/franz-go/plugin/kzap	2023-03-14
gomod	github.com/twmb/murmur3	2023-06-01
gomod	github.com/uber/jaeger-client-go	2021-12-07
gomod	github.com/uber/jaeger-lib	2021-03-29
gomod	github.com/x448/float16	2020-01-17
gomod	github.com/yagipy/maintidx	2021-12-25
gomod	github.com/yeya24/promlinter	2024-04-22
gomod	github.com/ykadowak/zerologlint	2023-12-03
gomod	github.com/yosida95/uritemplate/v3	2022-04-19
gomod	github.com/yusufpapurcu/wmi	2024-01-28
gomod	gitlab.com/bosi/decorder	2024-04-21
gomod	go.opentelemetry.io/otel/exporters/jaeger	2023-08-28
gomod	go.uber.org/atomic	2023-05-03
gomod	go.uber.org/goleak	2023-10-24
gomod	go.uber.org/multierr	2023-03-29
gomod	gopkg.in/inf.v0	2018-03-26
gomod	gopkg.in/yaml.v2	2022-05-27
gomod	gopkg.in/yaml.v3	2022-05-27

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• chore(deps): pin dependencies (main) (ghcr.io/grafana/xk6-client-tracing, github.com/grafana/jsonnet-libs/grafana, github.com/grafana/jsonnet-libs/grafana-builder, github.com/grafana/jsonnet-libs/ksonnet-util, github.com/grafana/jsonnet-libs/kube-state-metrics/, github.com/grafana/jsonnet-libs/memcached, github.com/grafana/jsonnet-libs/mixin-utils, github.com/grafana/jsonnet-libs/prometheus, github.com/grafana/jsonnet-libs/tanka-util, github.com/grafana/rollout-operator/operations/rollout-operator, github.com/jsonnet-libs/k8s-libsonnet/1.32, github.com/jsonnet-libs/keda-libsonnet/2.15, github.com/jsonnet-libs/vertical-pod-autoscaler-libsonnet/1.0.0, grafana/writers-toolkit, memcached, minio/minio, prom/prometheus, redpandadata/redpanda, sigstore/cosign)
• chore(deps): pin grafana/tempo-ci-tools docker tag to eb72ebb (main)
• chore(deps): update grafana/tempo-vulture docker tag to v3.0.3 (main)
• chore(deps): update module github.com/bits-and-blooms/bitset to v1.25.0 (main)
• chore(deps): update module github.com/prometheus/alertmanager to v0.33.1 (main)
• chore(deps): update module github.com/prometheus/client_golang to v1.24.1 (main)
• chore(deps): update module github.com/prometheus/client_model to v0.6.2 (main)
• chore(deps): update module github.com/prometheus/common to v0.70.1 (main)
• chore(deps): update module github.com/prometheus/exporter-toolkit to v0.17.1 (main)
• chore(deps): update module github.com/prometheus/procfs to v0.21.1 (main)
• chore(deps): update module github.com/raeperd/recvcheck to v0.3.0 (main)
• chore(deps): update module github.com/relvacode/iso8601 to v1.8.0 (main)
• chore(deps): update module github.com/rogpeppe/go-internal to v1.16.0 (main)
• chore(deps): update module github.com/sagikazarmark/locafero to v0.12.0 (main)
• chore(deps): update module github.com/securego/gosec/v2 to v2.28.0 (main)
• chore(deps): update module github.com/sirupsen/logrus to v1.10.0 (main)
• chore(deps): update module github.com/spf13/cast to v1.10.0 (main)
• chore(deps): update module github.com/spf13/viper to v1.21.0 (main)
• chore(deps): update module github.com/spiffe/go-spiffe/v2 to v2.8.1 (main)
• chore(deps): update module github.com/subosito/gotenv to v1.6.0 (main)
• chore(deps): update module github.com/tklauser/go-sysconf to v0.4.0 (main)
• chore(deps): update module github.com/tklauser/numcpus to v0.12.0 (main)
• chore(deps): update module github.com/uudashr/iface to v1.5.0 (main)
• chore(deps): update module go.augendre.info/fatcontext to v0.10.0 (main)
• chore(deps): update module go.etcd.io/etcd/api/v3 to v3.7.1 (main)
• chore(deps): update module go.etcd.io/etcd/client/pkg/v3 to v3.7.1 (main)
• chore(deps): update module go.etcd.io/etcd/client/v3 to v3.7.1 (main)
• chore(deps): update module go.uber.org/multierr to v1.11.0 (main)
• chore(deps): update module go.uber.org/zap to v1.28.0 (main)
• chore(deps): update module golang.org/x/arch to v0.30.0 (main)
• chore(deps): update module golang.org/x/crypto to v0.55.0 (main)
• chore(deps): update module golang.org/x/term to v0.45.0 (main)
• chore(deps): update module golang.org/x/text to v0.41.0 (main)
• chore(deps): update module mvdan.cc/gofumpt to v0.11.0 (main)
• chore(deps): update otel/opentelemetry-collector docker tag to v0.158.0 (main)
• fix(deps): update azure-sdk-for-go monorepo (main) (github.com/Azure/azure-sdk-for-go/sdk/azcore, github.com/Azure/azure-sdk-for-go/sdk/azidentity, github.com/Azure/azure-sdk-for-go/sdk/storage/azblob)
• fix(deps): update module cloud.google.com/go/storage to v1.64.0 (main)
• fix(deps): update module github.com/alecthomas/kong to v1.16.1 (main)
• fix(deps): update module github.com/alicebob/miniredis/v2 to v2.38.0 (main)
• fix(deps): update module github.com/grpc-ecosystem/go-grpc-middleware/v2 to v2.3.3 (main)
• fix(deps): update module github.com/jaegertracing/jaeger-idl to v0.10.0 (main)
• fix(deps): update module github.com/jedib0t/go-pretty/v6 to v6.8.3 (main)
• fix(deps): update module github.com/mark3labs/mcp-go to v0.58.0 (main)
• fix(deps): update module github.com/parquet-go/parquet-go to v0.32.0 (main)
• fix(deps): update module github.com/prometheus/prometheus to v0.313.2 (main)
• fix(deps): update module github.com/redis/go-redis/v9 to v9.22.0 (main)
• fix(deps): update module github.com/twmb/franz-go/plugin/kotel to v1.7.0 (main)
• fix(deps): update module go.opentelemetry.io/proto/otlp to v1.11.0 (main)
• fix(deps): update module google.golang.org/api to v0.293.0 (main)
• fix(deps): update module google.golang.org/grpc to v1.83.0 (main)
• fix(deps): update opentelemetry-collector (main) (go.opentelemetry.io/collector, go.opentelemetry.io/collector/client, go.opentelemetry.io/collector/component, go.opentelemetry.io/collector/component/componentstatus, go.opentelemetry.io/collector/component/componenttest, go.opentelemetry.io/collector/config/configauth, go.opentelemetry.io/collector/config/configcompression, go.opentelemetry.io/collector/config/configgrpc, go.opentelemetry.io/collector/config/confighttp, go.opentelemetry.io/collector/config/configmiddleware, go.opentelemetry.io/collector/config/confignet, go.opentelemetry.io/collector/config/configopaque, go.opentelemetry.io/collector/config/configoptional, go.opentelemetry.io/collector/config/configretry, go.opentelemetry.io/collector/config/configtelemetry, go.opentelemetry.io/collector/config/configtls, go.opentelemetry.io/collector/confmap, go.opentelemetry.io/collector/confmap/xconfmap, go.opentelemetry.io/collector/connector, go.opentelemetry.io/collector/connector/connectortest, go.opentelemetry.io/collector/connector/xconnector, go.opentelemetry.io/collector/consumer, go.opentelemetry.io/collector/consumer/consumererror, go.opentelemetry.io/collector/consumer/consumererror/xconsumererror, go.opentelemetry.io/collector/consumer/consumertest, go.opentelemetry.io/collector/consumer/xconsumer, go.opentelemetry.io/collector/exporter, go.opentelemetry.io/collector/exporter/exporterhelper, go.opentelemetry.io/collector/exporter/exporterhelper/xexporterhelper, go.opentelemetry.io/collector/exporter/exportertest, go.opentelemetry.io/collector/exporter/otlpexporter, go.opentelemetry.io/collector/exporter/otlphttpexporter, go.opentelemetry.io/collector/exporter/xexporter, go.opentelemetry.io/collector/extension, go.opentelemetry.io/collector/extension/extensionauth, go.opentelemetry.io/collector/extension/extensioncapabilities, go.opentelemetry.io/collector/extension/extensionmiddleware, go.opentelemetry.io/collector/extension/extensiontest, go.opentelemetry.io/collector/extension/xextension, go.opentelemetry.io/collector/featuregate, go.opentelemetry.io/collector/internal/componentalias, go.opentelemetry.io/collector/internal/fanoutconsumer, go.opentelemetry.io/collector/internal/sharedcomponent, go.opentelemetry.io/collector/internal/telemetry, go.opentelemetry.io/collector/otelcol, go.opentelemetry.io/collector/pdata, go.opentelemetry.io/collector/pdata/pprofile, go.opentelemetry.io/collector/pdata/testdata, go.opentelemetry.io/collector/pdata/xpdata, go.opentelemetry.io/collector/pipeline, go.opentelemetry.io/collector/pipeline/xpipeline, go.opentelemetry.io/collector/processor, go.opentelemetry.io/collector/processor/processorhelper, go.opentelemetry.io/collector/processor/processorhelper/xprocessorhelper, go.opentelemetry.io/collector/processor/processortest, go.opentelemetry.io/collector/processor/xprocessor, go.opentelemetry.io/collector/receiver, go.opentelemetry.io/collector/receiver/otlpreceiver, go.opentelemetry.io/collector/receiver/receiverhelper, go.opentelemetry.io/collector/receiver/receivertest, go.opentelemetry.io/collector/receiver/xreceiver, go.opentelemetry.io/collector/service, go.opentelemetry.io/collector/service/hostcapabilities)
• fix(deps): update opentelemetry-contrib (main) (github.com/open-telemetry/opentelemetry-collector-contrib/exporter/zipkinexporter, github.com/open-telemetry/opentelemetry-collector-contrib/internal/coreinternal, github.com/open-telemetry/opentelemetry-collector-contrib/internal/exp/metrics, github.com/open-telemetry/opentelemetry-collector-contrib/internal/filter, github.com/open-telemetry/opentelemetry-collector-contrib/internal/kafka, github.com/open-telemetry/opentelemetry-collector-contrib/pkg/core/xidutils, github.com/open-telemetry/opentelemetry-collector-contrib/pkg/kafka/configkafka, github.com/open-telemetry/opentelemetry-collector-contrib/pkg/ottl, github.com/open-telemetry/opentelemetry-collector-contrib/pkg/pdatautil, github.com/open-telemetry/opentelemetry-collector-contrib/pkg/sampling, github.com/open-telemetry/opentelemetry-collector-contrib/pkg/translator/azure, github.com/open-telemetry/opentelemetry-collector-contrib/pkg/translator/jaeger, github.com/open-telemetry/opentelemetry-collector-contrib/pkg/translator/zipkin, github.com/open-telemetry/opentelemetry-collector-contrib/processor/deltatocumulativeprocessor, github.com/open-telemetry/opentelemetry-collector-contrib/processor/filterprocessor, github.com/open-telemetry/opentelemetry-collector-contrib/processor/spanpruningprocessor, github.com/open-telemetry/opentelemetry-collector-contrib/receiver/jaegerreceiver, github.com/open-telemetry/opentelemetry-collector-contrib/receiver/kafkareceiver, github.com/open-telemetry/opentelemetry-collector-contrib/receiver/zipkinreceiver, go.opentelemetry.io/contrib/bridges/otelzap, go.opentelemetry.io/contrib/bridges/prometheus, go.opentelemetry.io/contrib/detectors/gcp, go.opentelemetry.io/contrib/exporters/autoexport, go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc, go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace, go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp, go.opentelemetry.io/contrib/otelconf, go.opentelemetry.io/contrib/propagators/b3, go.opentelemetry.io/contrib/propagators/jaeger, go.opentelemetry.io/contrib/samplers/jaegerremote)
• fix(deps): update opentelemetry-otel (main) (go.opentelemetry.io/otel, go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc, go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp, go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc, go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp, go.opentelemetry.io/otel/exporters/otlp/otlptrace, go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc, go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp, go.opentelemetry.io/otel/exporters/prometheus, go.opentelemetry.io/otel/exporters/stdout/stdoutlog, go.opentelemetry.io/otel/exporters/stdout/stdoutmetric, go.opentelemetry.io/otel/exporters/stdout/stdouttrace, go.opentelemetry.io/otel/log, go.opentelemetry.io/otel/metric, go.opentelemetry.io/otel/sdk, go.opentelemetry.io/otel/sdk/log, go.opentelemetry.io/otel/sdk/metric, go.opentelemetry.io/otel/trace)
• chore(deps): update actions/cache action to v6 (main)
• chore(deps): update actions/checkout action to v7 (main)
• chore(deps): update actions/setup-go action to v7 (main)
• chore(deps): update actions/stale action to v11 (main)
• chore(deps): update grafana/shared-workflows/trigger-argo-workflow action to v2.0.0 (main)
• chore(deps): update grafana/tempo-ci-tools docker tag to v20260812 (main)
• chore(deps): update module dev.gaijin.team/go/exhaustruct/v4 to v5 (main)
• chore(deps): update module github.com/bombsimon/wsl/v4 to v5 (main)
• chore(deps): update module github.com/cenkalti/backoff/v4 to v7 (main)
• chore(deps): update module github.com/cenkalti/backoff/v5 to v7 (main)
• chore(deps): update module github.com/denis-tingaikin/go-header to v1 (main)
• chore(deps): update module github.com/hashicorp/consul/api to v2 (main)
• chore(deps): update module github.com/hashicorp/go-immutable-radix to v2 (main)
• chore(deps): update module github.com/hashicorp/golang-lru to v2 (main)
• chore(deps): update module github.com/hashicorp/hcl to v2 (main)
• chore(deps): update module github.com/matttproud/golang_protobuf_extensions to v2 (main)
• chore(deps): update module github.com/olekukonko/tablewriter to v1 (main)
• chore(deps): update module github.com/pelletier/go-toml to v2 (main)
• chore(deps): update module github.com/ryancurrah/gomodguard to v2 (main)
• chore(deps): update module github.com/xo/terminfo to v1 (main)
• chore(deps): update module gopkg.in/yaml.v2 to v3 (main)
• fix(deps): update module go.opentelemetry.io/collector/config/configgrpc to v1 (main)
• chore(deps): lock file maintenance (main)
• chore(deps): pin dependencies (release-v2.10)
• chore(deps): update golang:alpine docker digest to 3889b42 (release-v2.10)
• chore(deps): update go module directive to v1.26.6 (release-v2.10)
• chore(deps): update grafana/tempo-ci-tools docker tag to v20260812 (release-v2.10)
• chore(deps): lock file maintenance (release-v2.10)
• chore(deps): pin dependencies (release-v3.0)
• chore(deps): update go module directive to v1.26.6 (release-v3.0)
• chore(deps): update golang docker tag to v1.26.5 (release-v3.0)
• chore(deps): update grafana/tempo-ci-tools docker tag to v20260812 (release-v3.0)
• chore(deps): lock file maintenance (release-v3.0)
• 🔐 Create all rate-limited PRs at once 🔐

Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

• chore(deps): update ghcr.io/grafana/xk6-client-tracing docker tag to v0.0.10 (main)
• chore(deps): update dependency github.com/grafana/rollout-operator/operations/rollout-operator to v0.38.1 (main)
• chore(deps): update module github.com/dlclark/regexp2/v2 to v2.7.1 (main)
• chore(deps): update prom/memcached-exporter docker tag to v0.17.0 (main)

---

Warning

Renovate failed to look up the following dependencies: Could not determine new digest for update (docker package docker.redpanda.com/redpandadata/console).

Files affected: example/docker-compose/distributed/docker-compose.yaml

---

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): update actions/checkout digest to d23441a (main)
• chore(deps): update docker (main)
• chore(deps): update opentelemetry-proto digest to 4411380 (main)
• fix(deps): update gomod patch updates (main) (cel.dev/expr, charm.land/lipgloss/v2, cloud.google.com/go/auth, codeberg.org/chavacava/garif, github.com/Abirdcfly/dupword, github.com/Antonboom/errname, github.com/Antonboom/nilnil, github.com/ClickHouse/clickhouse-go-linter, github.com/antchfx/xpath, github.com/aws/aws-sdk-go-v2, github.com/aws/aws-sdk-go-v2/config, github.com/aws/aws-sdk-go-v2/credentials, github.com/aws/aws-sdk-go-v2/feature/ec2/imds, github.com/aws/aws-sdk-go-v2/internal/configsources, github.com/aws/aws-sdk-go-v2/internal/endpoints/v2, github.com/aws/aws-sdk-go-v2/internal/v4a, github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding, github.com/aws/aws-sdk-go-v2/service/internal/presigned-url, github.com/aws/aws-sdk-go-v2/service/signin, github.com/aws/aws-sdk-go-v2/service/sso, github.com/aws/aws-sdk-go-v2/service/ssooidc, github.com/aws/aws-sdk-go-v2/service/sts, github.com/aws/smithy-go, github.com/bitfield/gotestdox, github.com/butuzov/mirror, github.com/bytedance/gopkg, github.com/bytedance/sonic, github.com/bytedance/sonic/loader, github.com/charmbracelet/ultraviolet, github.com/charmbracelet/x/ansi, github.com/cloudwego/base64x, github.com/dave/dst, github.com/ebitengine/purego, github.com/elastic/lunes, github.com/firefart/nonamedreturns, github.com/foxboron/go-tpm-keyfiles, github.com/fxamacker/cbor/v2, github.com/ghostiam/protogetter, github.com/go-critic/go-critic, github.com/go-logr/logr, github.com/go-openapi/spec, github.com/go-openapi/validate, github.com/golangci/gofmt, github.com/golangci/rowserrcheck, github.com/google/jsonschema-go, github.com/googleapis/enterprise-certificate-proxy, github.com/grafana/dskit, github.com/grafana/e2e, github.com/grafana/gomemcache, github.com/grafana/pyroscope-go/godeltaprof, github.com/klauspost/compress, github.com/knadh/koanf/maps, github.com/knadh/koanf/providers/confmap, github.com/knadh/koanf/v2, github.com/lucasb-eyer/go-colorful, github.com/lufia/plan9stats, github.com/mattn/go-colorable, github.com/mattn/go-isatty, github.com/mattn/go-runewidth, github.com/matttproud/golang_protobuf_extensions, github.com/mdlayher/socket, github.com/minio/minio-go/v7, github.com/nunnatsa/ginkgolinter, github.com/oklog/ulid/v2, github.com/olekukonko/ll, github.com/opentracing-contrib/go-grpc, github.com/parquet-go/bitpack, github.com/pb33f/jsonpath, github.com/pierrec/lz4/v4, github.com/planetscale/vtprotobuf, github.com/power-devops/perfstat, github.com/prometheus/client_golang/exp, github.com/santhosh-tekuri/jsonschema/v6, github.com/shirou/gopsutil/v4, github.com/stretchr/objx, github.com/timakin/bodyclose, github.com/tinylib/msgp, github.com/twmb/franz-go, github.com/ua-parser/uap-go, github.com/yuin/gopher-lua, go, go.yaml.in/yaml/v2, go.yaml.in/yaml/v3, go.yaml.in/yaml/v4, golang.org/x/exp, golang.org/x/exp/typeparams, google.golang.org/genproto, google.golang.org/genproto/googleapis/api, google.golang.org/genproto/googleapis/rpc, google.golang.org/protobuf, gopkg.in/ini.v1, mvdan.cc/unparam, sigs.k8s.io/structured-merge-diff/v6)
• chore(deps): update go-openapi packages (main) (github.com/go-openapi/analysis, github.com/go-openapi/loads, github.com/go-openapi/strfmt, github.com/go-openapi/swag, github.com/go-openapi/swag/cmdutils, github.com/go-openapi/swag/conv, github.com/go-openapi/swag/fileutils, github.com/go-openapi/swag/jsonname, github.com/go-openapi/swag/jsonutils, github.com/go-openapi/swag/loading, github.com/go-openapi/swag/mangling, github.com/go-openapi/swag/netutils, github.com/go-openapi/swag/pools, github.com/go-openapi/swag/stringutils, github.com/go-openapi/swag/typeutils, github.com/go-openapi/swag/yamlutils)
• chore(deps): update module cloud.google.com/go/monitoring to v1.30.0 (main)
• chore(deps): update module github.com/apache/thrift to v0.24.0 (main)
• chore(deps): update module github.com/armon/go-metrics to v0.6.1 (main)
• chore(deps): update module github.com/googlecloudplatform/opentelemetry-operations-go/detectors/gcp to v1.35.0 (main)
• chore(deps): update module github.com/googlecloudplatform/opentelemetry-operations-go/exporter/metric to v0.59.0 (main)
• chore(deps): update module github.com/grpc-ecosystem/grpc-gateway/v2 to v2.30.0 (main)
• chore(deps): update module github.com/jgautheron/goconst to v1.11.0 (main)
• chore(deps): update module github.com/kisielk/errcheck to v1.20.0 (main)
• chore(deps): update module github.com/klauspost/cpuid/v2 to v2.4.0 (main)
• chore(deps): update module github.com/olekukonko/errors to v1.3.0 (main)
• chore(deps): update module github.com/parquet-go/jsonlite to v1.5.4 (main)
• chore(deps): update module github.com/pb33f/libopenapi to v0.38.7 (main)
• chore(deps): update module github.com/pelletier/go-toml/v2 to v2.4.3 (main)
• chore(deps): update module github.com/pires/go-proxyproto to v0.15.0 (main)
• fix(deps): update module github.com/twmb/franz-go/plugin/kprom to v1.5.0 (main)
• Click on this checkbox to rebase all open PRs at once

PR Closed (Blocked)

The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.

• fix(deps): update module github.com/sony/gobreaker to v2 (main)
• fix(deps): update module github.com/twmb/franz-go/pkg/kmsg to v2 (main)
• fix(deps): update module go.yaml.in/yaml/v2 to v3 (main)

Vulnerabilities

Important

0/2 CVEs have Renovate fixes.

gomod

go.mod

golang.org/x/crypto

• GO-2026-5932

tools/go.mod

golang.org/x/crypto

• GO-2026-5932

Detected Dependencies

Note

Detected dependencies section has been truncated

docker-compose (5)

example/docker-compose/debug/docker-compose.yaml (4)

• grafana/tempo-debug latest
• ghcr.io/grafana/xk6-client-tracing v0.0.9 → [Updates: v0.0.10, v0.0.9]
• prom/prometheus latest → [Updates: latest]
• grafana/grafana 13.1.3@sha256:ab5cb380e3ff3172d6c8bd2e7cfd31cce977d2881b260e1f5bc089bf0b759b43

example/docker-compose/distributed/docker-compose.yaml (9)

• minio/minio latest → [Updates: latest]
• redpandadata/redpanda latest → [Updates: latest]
• redpandadata/redpanda latest → [Updates: latest]
• docker.redpanda.com/redpandadata/console v3.5.0@sha256:b2cbdd93dee412142f95a61488118f33b8e31ea576bfb3ce625fbaffbdf0803a
• ghcr.io/grafana/xk6-client-tracing v0.0.9 → [Updates: v0.0.10, v0.0.9]
• grafana/alloy v1.18.1@sha256:0f4434c92b3e6cdac38bb129b344e1790c246f7b6e2eaffcc16a5fa363240e33
• prom/prometheus latest → [Updates: latest]
• grafana/grafana 13.1.3@sha256:ab5cb380e3ff3172d6c8bd2e7cfd31cce977d2881b260e1f5bc089bf0b759b43
• memcached 1.6 → [Updates: 1.6]

example/docker-compose/migrate-to-3/docker-compose.yaml (9)

• minio/minio latest → [Updates: latest]
• grafana/alloy v1.18.1@sha256:0f4434c92b3e6cdac38bb129b344e1790c246f7b6e2eaffcc16a5fa363240e33
• ghcr.io/grafana/xk6-client-tracing v0.0.9 → [Updates: v0.0.10, v0.0.9]
• prom/prometheus latest → [Updates: latest]
• grafana/grafana 13.1.3@sha256:ab5cb380e3ff3172d6c8bd2e7cfd31cce977d2881b260e1f5bc089bf0b759b43
• redpandadata/redpanda latest → [Updates: latest]
• redpandadata/redpanda latest → [Updates: latest]
• docker.redpanda.com/redpandadata/console v3.5.0
• grafana/tempo-vulture 3.0.2@sha256:c57058b7c1fda4d4461dd0c43dae06c6a3cbcc4359c66c08c373736302c6b6b6 → [Updates: 3.0.3]

example/docker-compose/multitenant/docker-compose.yaml (5)

• ghcr.io/grafana/xk6-client-tracing v0.0.9 → [Updates: v0.0.10, v0.0.9]
• ghcr.io/grafana/xk6-client-tracing v0.0.9 → [Updates: v0.0.10, v0.0.9]
• otel/opentelemetry-collector 0.153.0@sha256:6ed874ea083d67a3085acfc75343f2ad11d9abe6006d7ea4a16e2dba9af14e49 → [Updates: 0.158.0]
• prom/prometheus latest → [Updates: latest]
• grafana/grafana 13.1.3@sha256:ab5cb380e3ff3172d6c8bd2e7cfd31cce977d2881b260e1f5bc089bf0b759b43

example/docker-compose/single-binary/docker-compose.yaml (4)

• ghcr.io/grafana/xk6-client-tracing v0.0.9 → [Updates: v0.0.10, v0.0.9]
• grafana/alloy v1.18.1@sha256:0f4434c92b3e6cdac38bb129b344e1790c246f7b6e2eaffcc16a5fa363240e33
• prom/prometheus latest → [Updates: latest]
• grafana/grafana 13.1.3@sha256:ab5cb380e3ff3172d6c8bd2e7cfd31cce977d2881b260e1f5bc089bf0b759b43

dockerfile (6)

cmd/tempo-cli/Dockerfile (2)

• alpine latest@sha256:28bd5fe8b56d1bd048e5babf5b10710ebe0bae67db86916198a6eec434943f8b
• gcr.io/distroless/static-debian12 debug@sha256:ecbc4ac563b95a132fd370065553857dcc38943066cb0662d09999011f3d3597 → [Updates: debug]

cmd/tempo-query/Dockerfile (2)

• alpine latest@sha256:28bd5fe8b56d1bd048e5babf5b10710ebe0bae67db86916198a6eec434943f8b
• gcr.io/distroless/static-debian12 debug@sha256:ecbc4ac563b95a132fd370065553857dcc38943066cb0662d09999011f3d3597 → [Updates: debug]

cmd/tempo-vulture/Dockerfile (3)

• alpine latest@sha256:28bd5fe8b56d1bd048e5babf5b10710ebe0bae67db86916198a6eec434943f8b
• gcr.io/distroless/static-debian12 debug@sha256:ecbc4ac563b95a132fd370065553857dcc38943066cb0662d09999011f3d3597 → [Updates: debug]
• gcr.io/distroless/static-debian12 sha256:61b7ccecebc7c474a531717de80a94709d20547cdcdaf740c25876f2a8e38b44 → [Updates: undefined]

cmd/tempo/Dockerfile (3)

• alpine latest@sha256:28bd5fe8b56d1bd048e5babf5b10710ebe0bae67db86916198a6eec434943f8b
• gcr.io/distroless/static-debian12 debug@sha256:ecbc4ac563b95a132fd370065553857dcc38943066cb0662d09999011f3d3597 → [Updates: debug]
• gcr.io/distroless/static-debian12 sha256:61b7ccecebc7c474a531717de80a94709d20547cdcdaf740c25876f2a8e38b44 → [Updates: undefined]

cmd/tempo/Dockerfile_debug (2)

• golang 1.26.5-alpine@sha256:0178a641fbb4858c5f1b48e34bdaabe0350a330a1b1149aabd498d0699ff5fb2 → [Updates: 1.26.6-alpine]
• alpine 3.24@sha256:28bd5fe8b56d1bd048e5babf5b10710ebe0bae67db86916198a6eec434943f8b

tools/Dockerfile (1)

• golang 1.26.5-alpine@sha256:0178a641fbb4858c5f1b48e34bdaabe0350a330a1b1149aabd498d0699ff5fb2 → [Updates: 1.26.6-alpine]

git-submodules (1)

.gitmodules (1)

• opentelemetry-proto 7c63f7b8b69e83bdda071a70898cd8a9f4ec77a2 → [Updates: undefined]

github-actions (16)

.github/workflows/actionlint.yml (1)

• actions/checkout v6.1.0@d23441a48e516b6c34aea4fa41551a30e30af803 → [Updates: v7.0.1]

.github/workflows/backport.yml (2)

• grafana/shared-workflows create-github-app-token/v0.3.1@46f48da11e78ebdba7a8747ae456b11062fac83e
• actions/checkout v6.1.0@d23441a48e516b6c34aea4fa41551a30e30af803 → [Updates: v7.0.1]

.github/workflows/changelog.yml (2)

• actions/checkout v6.1.0@d23441a48e516b6c34aea4fa41551a30e30af803 → [Updates: v7.0.1]
• actions/setup-go v6.5.0@924ae3a1cded613372ab5595356fb5720e22ba16 → [Updates: v7.0.0]

.github/workflows/ci.yml (31)

• actions/checkout v6@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7, v6]
• actions/setup-go v6@924ae3a1cded613372ab5595356fb5720e22ba16 → [Updates: v7]
• actions/cache v5@caa296126883cff596d87d8935842f9db880ef25 → [Updates: v6]
• actions/checkout v6@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7, v6]
• actions/setup-go v6@924ae3a1cded613372ab5595356fb5720e22ba16 → [Updates: v7]
• actions/upload-artifact v7@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• actions/checkout v6@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7, v6]
• actions/checkout v6@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7, v6]
• actions/setup-go v6@924ae3a1cded613372ab5595356fb5720e22ba16 → [Updates: v7]
• actions/checkout v6@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7, v6]
• actions/setup-go v6@924ae3a1cded613372ab5595356fb5720e22ba16 → [Updates: v7]
• actions/checkout v6@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7, v6]
• actions/setup-go v6@924ae3a1cded613372ab5595356fb5720e22ba16 → [Updates: v7]
• actions/checkout v6@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7, v6]
• actions/setup-go v6@924ae3a1cded613372ab5595356fb5720e22ba16 → [Updates: v7]
• actions/checkout v6@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7, v6]
• actions/setup-go v6@924ae3a1cded613372ab5595356fb5720e22ba16 → [Updates: v7]
• actions/checkout v6@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7, v6]
• actions/checkout v6@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7, v6]
• actions/download-artifact v8@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• grafana/shared-workflows annotate-coverage/v0.2.0@ccd82960521026200c6b51f6c61100732a1a62f3
• ubuntu 24.04
• ubuntu 24.04
• ubuntu 24.04
• ubuntu 24.04
• ubuntu 24.04
• ubuntu 24.04
• ubuntu 24.04
• ubuntu 24.04
• ubuntu 24.04
• ubuntu 24.04

.github/workflows/deploy-pr-preview.yml (1)

• grafana/writers-toolkit main → [Updates: main]

.github/workflows/docker-ci-tools.yml (6)

• actions/checkout v6@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7, v6]
• actions/checkout v6@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7, v6]
• grafana/shared-workflows login-to-gar/v1.0.3@1f541877ceb22c7be7667d8a8df04984aeac9f9d
• actions/checkout v6@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7, v6]
• grafana/shared-workflows login-to-gar/v1.0.3@1f541877ceb22c7be7667d8a8df04984aeac9f9d
• ubuntu 24.04

.github/workflows/docker.yml (11)

• actions/checkout v6@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7, v6]
• actions/checkout v6@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7, v6]
• grafana/shared-workflows login-to-gar/v1.0.3@1f541877ceb22c7be7667d8a8df04984aeac9f9d
• actions/checkout v6@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7, v6]
• grafana/shared-workflows login-to-gar/v1.0.3@1f541877ceb22c7be7667d8a8df04984aeac9f9d
• grafana/shared-workflows login-to-gar/v1.0.3@1f541877ceb22c7be7667d8a8df04984aeac9f9d
• grafana/shared-workflows trigger-argo-workflow/v1.2.2@b513eb1dfd9becfa671a41e55063cdd5c0a08031 → [Updates: trigger-argo-workflow/v2.0.0]
• ubuntu 24.04
• ubuntu 24.04
• ubuntu 24.04
• ubuntu 24.04

.github/workflows/govulncheck.yml (4)

• actions/checkout v6@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7, v6]
• actions/checkout v6@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7, v6]
• actions/setup-go v6@924ae3a1cded613372ab5595356fb5720e22ba16 → [Updates: v7]
• ubuntu 24.04

.github/workflows/release-prep.yml (5)

• grafana/shared-workflows create-github-app-token/v0.3.1@46f48da11e78ebdba7a8747ae456b11062fac83e
• actions/checkout v6@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7, v6]
• actions/setup-go v6.5.0@924ae3a1cded613372ab5595356fb5720e22ba16 → [Updates: v7.0.0]
• peter-evans/create-pull-request v8.1.1@5f6978faf089d4d20b00c7766989d076bb2fc7f1
• ubuntu 24.04

.github/workflows/release-tag.yml (4)

• actions/checkout v6@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7, v6]
• actions/checkout v6@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7, v6]
• ubuntu 24.04
• ubuntu 24.04

.github/workflows/release.yml (1)

• actions/checkout v6@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7, v6]

.github/workflows/renovate.yml (3)

• actions/checkout v6@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7, v6]
• actions/cache v5@caa296126883cff596d87d8935842f9db880ef25 → [Updates: v6]
• grafana/shared-workflows validate-renovate-config/v0.1.4@b7474485d59e97b4ee81d5f94f442f072380bf79

.github/workflows/sbom-report.yml (3)

• actions/checkout v6@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7, v6]
• anchore/sbom-action v0.24.0@e22c389904149dbc22b58101806040fa8d37a610
• ubuntu 24.04

.github/workflows/sign-and-attest.yml (5)

• grafana/shared-workflows login-to-gar/v1.0.3@1f541877ceb22c7be7667d8a8df04984aeac9f9d
• sigstore/cosign-installer v4.1.2@6f9f17788090df1f26f669e9d70d6ae9567deba6
• actions/attest-build-provenance v4.2.2@4d101475d8b20a2381f78447822ac1eab6504dd8
• ubuntu 24.04
• sigstore/cosign v3.1.3 → [Updates: v3.1.3]

.github/workflows/stale.yml (2)

• actions/stale v10.4.0@1e223db275d687790206a7acac4d1a11bd6fe629 → [Updates: v11.0.0]
• ubuntu 24.04

.github/workflows/tools-tests.yml (3)

• actions/checkout v6@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7, v6]
• actions/setup-go v6@924ae3a1cded613372ab5595356fb5720e22ba16 → [Updates: v7]
• ubuntu 24.04

gomod (1)

go.mod (57)

• go 1.26.5 → [Updates: 1.26.6]
• cloud.google.com/go/storage v1.62.2 → [Updates: v1.64.0]
• github.com/alecthomas/kong v1.15.0 → [Updates: v1.16.1]
• github.com/alicebob/miniredis/v2 v2.37.0 → [Updates: v2.38.0]
• github.com/cespare/xxhash/v2 v2.3.0
• github.com/cristalhq/hedgedhttp v0.9.1
• github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc@d8f796af33cc
• github.com/drone/envsubst v1.0.3
• github.com/dustin/go-humanize v1.0.1
• github.com/facette/natsort v0.0.0-20181210072756-2cd4dd1e2dcb@2cd4dd1e2dcb
• github.com/go-kit/log v0.2.1
• github.com/go-logfmt/logfmt v0.6.1
• github.com/gogo/protobuf v1.3.2
• github.com/gogo/status v1.1.1
• github.com/golang/protobuf v1.5.4
• github.com/google/go-cmp v0.7.0
• github.com/google/uuid v1.6.0
• github.com/gorilla/mux v1.8.1
• github.com/grafana/dskit v0.0.0-20260703122047-de1ec7541c44@de1ec7541c44 → [Updates: v0.0.0-20260703122047-de1ec7541c44]
• github.com/grafana/e2e v0.1.2-0.20260504080022-0f57c9f0da68@0f57c9f0da68 → [Updates: v0.1.2-0.20260504080022-0f57c9f0da68]
• github.com/hashicorp/go-hclog v1.6.3
• github.com/jedib0t/go-pretty/v6 v6.7.10 → [Updates: v6.8.3]
• github.com/jsternberg/zap-logfmt v1.3.0
• github.com/klauspost/compress v1.19.1 → [Updates: v1.19.2]
• github.com/minio/minio-go/v7 v7.2.0 → [Updates: v7.2.1]
• github.com/olekukonko/tablewriter v1.1.4
• github.com/open-telemetry/opentelemetry-collector-contrib/pkg/translator/jaeger v0.153.0 → [Updates: v0.158.0]
• github.com/opentracing-contrib/go-grpc v0.1.2 → [Updates: v0.1.4]
• github.com/opentracing/opentracing-go v1.2.0
• github.com/pierrec/lz4/v4 v4.1.26 → [Updates: v4.1.28]
• github.com/pkg/errors v0.9.1
• github.com/prometheus/client_golang v1.24.1
• github.com/prometheus/client_model v0.6.2
• github.com/prometheus/common v0.70.1
• github.com/prometheus/prometheus v0.312.0 → [Updates: v0.313.2]
• github.com/segmentio/fasthash v1.0.3
• github.com/sony/gobreaker v1.0.0 → [Updates: v2.4.0]
• github.com/spf13/viper v1.21.0
• github.com/stretchr/testify v1.11.1
• github.com/uber/jaeger-client-go v2.30.0+incompatible
• `go.opentel

✂ Note

PR body was truncated to here.