Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Abandoned Dependencies

The following dependencies have not received updates for an extended period and may be unmaintained.

View abandoned dependencies (42)

[!NOTE]
Packages are marked as abandoned when they exceed the abandonmentThreshold since their last release. Unlike deprecated packages with official notices, abandonment is detected by release inactivity.

Datasource	Package	Last Updated
gomod	dario.cat/mergo	2025-05-07
gomod	github.com/Masterminds/sprig/v3	2024-08-29
gomod	github.com/cloudflare/cfssl	2024-03-05
gomod	github.com/distribution/reference	2024-03-26
gomod	github.com/drone/envsubst	2021-06-16
gomod	github.com/ghodss/yaml	2017-03-28
gomod	github.com/go-logr/zapr	2023-11-03
gomod	github.com/golang/mock	2022-05-12
gomod	github.com/google/uuid	2024-01-23
gomod	github.com/hashicorp/go-multierror	2021-03-11
gomod	github.com/mandelsoft/filepath	2024-02-23
gomod	github.com/mandelsoft/vfs	2024-10-14
gomod	github.com/opencontainers/go-digest	2020-05-14
gomod	github.com/opencontainers/image-spec	2025-03-03
gomod	github.com/pkg/errors	2020-01-14
gomod	github.com/robfig/cron/v3	2020-01-04
gomod	github.com/spf13/pflag	2025-09-02
gomod	github.com/xeipuuv/gojsonschema	2019-10-15
gomod	golang.org/x/lint	2024-11-12
gomod	gopkg.in/yaml.v3	2022-05-27
gomod	sigs.k8s.io/yaml	2025-07-24
regex	golang/mock	2021-06-11

Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

• chore(deps): lock file maintenance

Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

• chore(deps): update docker/setup-qemu-action digest to 1f40c72
• chore(deps): update gcr.io/distroless/static-debian12:nonroot docker digest to afa5c87
• chore(deps): update dependency kubernetes-sigs/controller-tools to v0.22.0
• fix(deps): update module github.com/docker/cli to v29.8.0+incompatible
• fix(deps): update module golang.org/x/crypto to v0.56.0
• fix(deps): update module sigs.k8s.io/controller-runtime to v0.25.0

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): update module google.golang.org/grpc to v1.83.1 [security]
• chore(deps): update docker/setup-buildx-action digest to 37fe631
• chore(deps): update openmcp-project/build to bd521de (hack/common, openmcp-project/build)
• chore(deps): update softprops/action-gh-release digest to efb3536
• fix(deps): update all patch dependencies (github.com/sirupsen/logrus, helm.sh/helm/v4)
• chore(deps): update dependency golangci/golangci-lint to v2.13.2
• chore(deps): update go module directive to v1.27.0
• fix(deps): update kubernetes monorepo to v0.37.0 (k8s.io/api, k8s.io/apiextensions-apiserver, k8s.io/apimachinery, k8s.io/client-go, k8s.io/code-generator)
• fix(deps): update module github.com/google/go-containerregistry to v0.22.0
• fix(deps): update module github.com/onsi/gomega to v1.43.0
• Click on this checkbox to rebase all open PRs at once

PR Closed (Blocked)

The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.

• fix(deps): update module github.com/containerd/containerd to v2
• fix(deps): update module github.com/onsi/ginkgo to v2

Detected Dependencies

dockerfile (1)

Dockerfile (1)

• gcr.io/distroless/static-debian12 nonroot@sha256:f5b485ea962d9bd1186b2f6b3a061191539b905b82ec395de78cbfae51f20e35 → [Updates: nonroot]

git-submodules (1)

.gitmodules (1)

• hack/common 087dc370eb85bfda59bf138fec8e36c97fce5933 → [Updates: undefined]

github-actions (8)

.github/workflows/ci.yaml (3)

• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/setup-go v7@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e
• arduino/setup-task v3.0.0@c0bc642852239c2689f73f4ea6459c29405f3c52

.github/workflows/integration_test_cron.yaml (6)

• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• docker/setup-qemu-action v4@96fe6ef7f33517b61c61be40b68a1882f3264fb8 → [Updates: v4]
• docker/login-action v4@dbcb813823bdd20940b903addbd779551569679f
• docker/setup-buildx-action v4@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c → [Updates: v4]
• actions/setup-go v7@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e
• arduino/setup-task v3.0.0@c0bc642852239c2689f73f4ea6459c29405f3c52

.github/workflows/integration_test_main.yaml (6)

• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• docker/setup-qemu-action v4@96fe6ef7f33517b61c61be40b68a1882f3264fb8 → [Updates: v4]
• docker/login-action v4@dbcb813823bdd20940b903addbd779551569679f
• docker/setup-buildx-action v4@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c → [Updates: v4]
• actions/setup-go v7@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e
• arduino/setup-task v3.0.0@c0bc642852239c2689f73f4ea6459c29405f3c52

.github/workflows/integration_test_pr.yaml (6)

• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• docker/setup-qemu-action v4@96fe6ef7f33517b61c61be40b68a1882f3264fb8 → [Updates: v4]
• docker/login-action v4@dbcb813823bdd20940b903addbd779551569679f
• docker/setup-buildx-action v4@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c → [Updates: v4]
• actions/setup-go v7@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e
• arduino/setup-task v3.0.0@c0bc642852239c2689f73f4ea6459c29405f3c52

.github/workflows/publish.yaml (8)

• actions/create-github-app-token v3@bcd2ba49218906704ab6c1aa796996da409d3eb1
• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• docker/setup-qemu-action v4@96fe6ef7f33517b61c61be40b68a1882f3264fb8 → [Updates: v4]
• docker/login-action v4@dbcb813823bdd20940b903addbd779551569679f
• docker/setup-buildx-action v4@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c → [Updates: v4]
• actions/setup-go v7@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e
• arduino/setup-task v3.0.0@c0bc642852239c2689f73f4ea6459c29405f3c52
• open-component-model/ocm-setup-action main@5755dc5c01c939f7dbba3bb07f9fb9b019a7a2a0

.github/workflows/release.yaml (3)

• actions/create-github-app-token v3@bcd2ba49218906704ab6c1aa796996da409d3eb1
• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• softprops/action-gh-release v3@3d0d9888cb7fd7b750713d6e236d1fcb99157228 → [Updates: v3]

.github/workflows/reuse.yaml (1)

• openmcp-project/build main@087dc370eb85bfda59bf138fec8e36c97fce5933 → [Updates: main]

.github/workflows/validate-pr-content.yaml (1)

• openmcp-project/build main@087dc370eb85bfda59bf138fec8e36c97fce5933 → [Updates: main]

gomod (5)

apis/go.mod (11)

• go 1.26.6 → [Updates: 1.27.0]
• github.com/onsi/ginkgo/v2 v2.32.1
• github.com/onsi/gomega v1.42.1 → [Updates: v1.43.0]
• github.com/robfig/cron/v3 v3.0.1
• k8s.io/api v0.36.3 → [Updates: v0.37.0]
• k8s.io/apiextensions-apiserver v0.36.3 → [Updates: v0.37.0]
• k8s.io/apimachinery v0.36.3 → [Updates: v0.37.0]
• k8s.io/client-go v0.36.3 → [Updates: v0.37.0]
• k8s.io/kube-openapi v0.0.0-20260721132016-d427ff9ee9ad@d427ff9ee9ad → [Updates: v0.0.0-20260904170622-9ab3195f2a72]
• k8s.io/utils v0.0.0-20260707023825-cf1189d6abe3@cf1189d6abe3
• sigs.k8s.io/yaml v1.6.0

controller-utils/go.mod (16)

• go 1.26.6 → [Updates: 1.27.0]
• github.com/go-logr/logr v1.4.4
• github.com/go-logr/zapr v1.3.0
• github.com/golang/mock v1.7.0-rc.1
• github.com/onsi/ginkgo/v2 v2.32.1
• github.com/onsi/gomega v1.42.1 → [Updates: v1.43.0]
• github.com/pkg/errors v0.9.1
• github.com/spf13/pflag v1.0.10
• go.uber.org/zap v1.28.0
• golang.org/x/crypto v0.55.0 → [Updates: v0.56.0]
• k8s.io/api v0.36.3 → [Updates: v0.37.0]
• k8s.io/apiextensions-apiserver v0.36.3 → [Updates: v0.37.0]
• k8s.io/apimachinery v0.36.3 → [Updates: v0.37.0]
• k8s.io/client-go v0.36.3 → [Updates: v0.37.0]
• sigs.k8s.io/controller-runtime v0.24.1 → [Updates: v0.25.0]
• sigs.k8s.io/yaml v1.6.0

go.mod (40)

• go 1.26.6 → [Updates: 1.27.0]
• dario.cat/mergo v1.0.2
• github.com/Masterminds/sprig/v3 v3.3.0
• github.com/cloudflare/cfssl v1.6.5
• github.com/distribution/reference v0.6.0
• github.com/docker/cli v29.7.2+incompatible → [Updates: v29.8.0+incompatible]
• github.com/go-logr/logr v1.4.4
• github.com/golang/mock v1.7.0-rc.1
• github.com/google/uuid v1.6.0
• github.com/hashicorp/go-multierror v1.1.1
• github.com/mandelsoft/filepath v0.0.0-20240223090642-3e2777258aa3@3e2777258aa3
• github.com/mandelsoft/goutils v0.0.0-20260802101738-162cd2928e3c@162cd2928e3c
• github.com/mandelsoft/spiff v1.7.0-beta-9
• github.com/mandelsoft/vfs v0.4.5-0.20250514111339-d7b067920e91@d7b067920e91
• github.com/onsi/ginkgo/v2 v2.32.1
• github.com/onsi/gomega v1.42.1 → [Updates: v1.43.0]
• github.com/opencontainers/go-digest v1.0.0
• github.com/pkg/errors v0.9.1
• github.com/prometheus/client_golang v1.24.1
• github.com/robfig/cron/v3 v3.0.1
• github.com/shirou/gopsutil/v4 v4.26.7 → [Updates: v4.26.8]
• github.com/spf13/cobra v1.10.2
• github.com/spf13/pflag v1.0.10
• github.com/xeipuuv/gojsonschema v1.2.0
• golang.org/x/crypto v0.55.0 → [Updates: v0.56.0]
• golang.org/x/sync v0.22.0
• golang.org/x/sys v0.47.0
• gopkg.in/yaml.v3 v3.0.1
• helm.sh/helm/v4 v4.2.3 → [Updates: v4.2.4]
• k8s.io/api v0.36.3 → [Updates: v0.37.0]
• k8s.io/apiextensions-apiserver v0.36.3 → [Updates: v0.37.0]
• k8s.io/apimachinery v0.36.3 → [Updates: v0.37.0]
• k8s.io/client-go v0.36.3 → [Updates: v0.37.0]
• k8s.io/code-generator v0.36.3 → [Updates: v0.37.0]
• k8s.io/utils v0.0.0-20260707023825-cf1189d6abe3@cf1189d6abe3
• ocm.software/ocm v0.48.0
• sigs.k8s.io/controller-runtime v0.24.1 → [Updates: v0.25.0]
• sigs.k8s.io/yaml v1.6.0
• github.com/eclipse-keypont/crypto11 v1.6.8
• google.golang.org/grpc v1.82.1 → [Updates: v1.83.1]

legacy-component-cli/go.mod (27)

• go 1.26.6 → [Updates: 1.27.0]
• github.com/containerd/containerd v1.7.34 → [Updates: v1.7.35, v2.3.4]
• github.com/distribution/reference v0.6.0
• github.com/docker/cli v29.7.2+incompatible → [Updates: v29.8.0+incompatible]
• github.com/drone/envsubst v1.0.3
• github.com/ghodss/yaml v1.0.0
• github.com/go-logr/logr v1.4.4
• github.com/go-logr/zapr v1.3.0
• github.com/golang/mock v1.7.0-rc.1
• github.com/google/go-containerregistry v0.21.9 → [Updates: v0.22.0]
• github.com/google/uuid v1.6.0
• github.com/mandelsoft/vfs v0.4.5-0.20250514111339-d7b067920e91@d7b067920e91
• github.com/onsi/ginkgo/v2 v2.32.1
• github.com/onsi/gomega v1.42.1 → [Updates: v1.43.0]
• github.com/opencontainers/distribution-spec/specs-go v0.0.0-20260730175803-fee21197eb94@fee21197eb94 → [Updates: v0.0.0-20260831232431-97274622c111]
• github.com/opencontainers/go-digest v1.0.0
• github.com/opencontainers/image-spec v1.1.1
• github.com/prometheus/client_golang v1.24.1
• github.com/sirupsen/logrus v1.10.0 → [Updates: v1.10.2]
• github.com/spf13/cobra v1.10.2
• github.com/spf13/pflag v1.0.10
• go.uber.org/zap v1.28.0
• golang.org/x/crypto v0.55.0 → [Updates: v0.56.0]
• k8s.io/api v0.36.3 → [Updates: v0.37.0]
• k8s.io/apimachinery v0.36.3 → [Updates: v0.37.0]
• sigs.k8s.io/yaml v1.6.0
• google.golang.org/grpc v1.82.1 → [Updates: v1.83.1]

legacy-component-spec/bindings-go/go.mod (14)

• go 1.26.6 → [Updates: 1.27.0]
• github.com/ghodss/yaml v1.0.0
• github.com/go-logr/logr v1.4.4
• github.com/mandelsoft/vfs v0.4.5-0.20250514111339-d7b067920e91@d7b067920e91
• github.com/onsi/ginkgo v1.16.5 → [Updates: v2.32.1]
• github.com/onsi/ginkgo/v2 v2.32.1
• github.com/onsi/gomega v1.42.1 → [Updates: v1.43.0]
• github.com/opencontainers/go-digest v1.0.0
• github.com/opencontainers/image-spec v1.1.1
• github.com/xeipuuv/gojsonschema v1.2.0
• golang.org/x/lint v0.0.0-20241112194109-818c5a804067@818c5a804067
• k8s.io/apimachinery v0.36.3 → [Updates: v0.37.0]
• k8s.io/code-generator v0.36.3 → [Updates: v0.37.0]
• sigs.k8s.io/yaml v1.6.0

helm-values (3)

docs/guided-tour/components/helm-chart/chart/echo-server/values.yaml (1)

• hashicorp/http-echo 1.0.0@sha256:fcb75f691c8b0414d670ae570240cbf95502cc18a9ba57e982ecac589760a186

docs/proposals/generation-command/01-single-helm/chart/echo-server/values.yaml (1)

• hashicorp/http-echo 1.0.0@sha256:fcb75f691c8b0414d670ae570240cbf95502cc18a9ba57e982ecac589760a186

docs/proposals/generation-command/02-double-helm/chart/echo-server-extended/values.yaml (1)

• hashicorp/http-echo 1.0.0@sha256:fcb75f691c8b0414d670ae570240cbf95502cc18a9ba57e982ecac589760a186

helmv3 (2)

charts/landscaper/Chart.yaml

pkg/deployer/helm/testdata/testchart5/Chart.yaml

regex (1)

Makefile (8)

• kubernetes-sigs/controller-tools v0.21.0 → [Updates: v0.22.0]
• golang/tools v0.49.0
• golangci/golangci-lint v2.12.2 → [Updates: v2.13.2]
• elastic/crd-ref-docs v0.3.0
• jqlang/jq v1.7.1
• open-component-model/ocm v0.48.0
• golang/mock v1.6.0
• distribution/distribution v3.1.1

renovate-config (1)

.github/renovate.json

---

• Check this box to trigger a request for Renovate to run again on this repository