Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Config Migration Needed

• Select this checkbox to let Renovate create an automated Config Migration PR.

Pending Approval

The following branches are pending approval. To create them, click on a checkbox below.

• chore(deps): update azure/setup-helm action to v5.0.1
• chore(deps): update helm dependencies (patch)
• fix(deps): update golang dependencies (patch) (github.com/99designs/gqlgen, github.com/aquasecurity/trivy, github.com/cloudoperators/heureka, github.com/golang-jwt/jwt/v5, github.com/onsi/ginkgo/v2, github.com/openfga/go-sdk, github.com/valkey-io/valkey-go, github.com/vektah/gqlparser/v2, k8s.io/api, k8s.io/apimachinery, k8s.io/client-go)
• chore(deps): update dependency python to 3.14
• chore(deps): update docker images (minor)
• chore(deps): update helm dependencies (minor)
• fix(deps): update golang dependencies (minor) (github.com/aquasecurity/trivy, github.com/cloudoperators/heureka, github.com/golang-jwt/jwt/v5, github.com/jedib0t/go-pretty/v6, github.com/onsi/ginkgo/v2, github.com/onsi/gomega, github.com/openfga/language/pkg/go, github.com/sapcc/go-api-declarations, github.com/sapcc/go-bits, golang.org/x/sync, golang.org/x/text, k8s.io/utils)
• fix(deps): update kubernetes packages to v0.36.1 (k8s.io/api, k8s.io/apimachinery, k8s.io/client-go)
• chore(deps): update dependency node to v24
• chore(deps): update docker images (major) (node, postgres, valkey/valkey)
• chore(deps): update helm dependencies (major)
• fix(deps): update golang dependencies (major) (github.com/gophercloud/gophercloud, gopkg.in/yaml.v2)
• 🔐 Create all pending approval PRs at once 🔐

Detected Dependencies

docker-compose (1)

docker-compose.yaml (2)

• valkey/valkey 7.2 → [Updates: 9.1]
• postgres 17 → [Updates: 18]

dockerfile (8)

.devcontainer/Dockerfile

Dockerfile (1)

• golang 1.26

Dockerfile.db

scanner/k8s-assets/Dockerfile (1)

• golang 1.26

scanner/keppel/Dockerfile (1)

• golang 1.26

scanner/nvd/Dockerfile (1)

• golang 1.26

tools/oidc_provider_mock/Dockerfile (1)

• golang 1.23 → [Updates: 1.26]

ui/Dockerfile (2)

• node 20-bullseye → [Updates: 24-bullseye]
• node 20-bullseye → [Updates: 24-bullseye]

github-actions (11)

.github/workflows/check-migration-files.yaml (1)

• actions/checkout v7

.github/workflows/codeql.yaml (1)

• cloudoperators/common main

.github/workflows/golangci-lint.yaml (2)

• actions/checkout v7
• actions/setup-go v6

.github/workflows/graphql-inspector.yml (8)

• actions/create-github-app-token v3
• actions/checkout v7
• actions/checkout v7
• actions/setup-node v6
• actions/github-script v9
• actions/github-script v9
• rtCamp/action-slack-notify v2
• node 18 → [Updates: 24]

.github/workflows/helm-release.yaml (6)

• actions/checkout v7
• azure/setup-helm v5.0.0 → [Updates: v5.0.1]
• actions/setup-python v6
• docker/login-action v4
• tj-actions/changed-files v47
• python 3.9 → [Updates: 3.14]

.github/workflows/license.yaml (1)

• cloudoperators/common main

.github/workflows/release.yaml (13)

• actions/checkout v7
• actions/setup-node v6
• codfish/semantic-release-action v5
• actions/checkout v7
• sigstore/cosign-installer v4.1.2
• docker/setup-qemu-action v4
• docker/setup-buildx-action v4
• docker/login-action v4
• docker/metadata-action v6
• docker/build-push-action v7
• aquasecurity/trivy-action master
• github/codeql-action v4
• node 18 → [Updates: 24]

.github/workflows/reuse.yaml (1)

• cloudoperators/common main

.github/workflows/stale.yaml (1)

• cloudoperators/common main

.github/workflows/sync-issues-to-jira.yaml (2)

• actions/checkout v7
• cloudoperators/sync-issues-github-jira main

.github/workflows/tests.yaml (4)

• actions/checkout v7
• actions/setup-go v6
• docker/setup-compose-action v2
• valkey/valkey 7.2 → [Updates: 9.1]

gomod (7)

go.mod (34)

• go 1.26.0
• github.com/99designs/gqlgen v0.17.90 → [Updates: v0.17.92]
• github.com/Khan/genqlient v0.8.1
• github.com/Masterminds/squirrel v1.5.4
• github.com/brianvoe/gofakeit/v7 v7.15.0
• github.com/coreos/go-oidc v2.5.0+incompatible
• github.com/gin-contrib/cors v1.7.7
• github.com/gin-gonic/gin v1.12.0
• github.com/go-sql-driver/mysql v1.10.0
• github.com/goark/go-cvss v1.6.7
• github.com/golang-jwt/jwt/v5 v5.3.1
• github.com/golang-migrate/migrate/v4 v4.19.1
• github.com/jmoiron/sqlx v1.4.0
• github.com/kelseyhightower/envconfig v1.4.0
• github.com/machinebox/graphql v0.2.2
• github.com/olekukonko/tablewriter v1.1.4
• github.com/onsi/ginkgo/v2 v2.29.0 → [Updates: v2.32.0]
• github.com/onsi/gomega v1.41.0 → [Updates: v1.42.1]
• github.com/onuryilmaz/ginprom v0.0.2
• github.com/openfga/go-sdk v0.8.1 → [Updates: v0.8.2]
• github.com/oyyblin/gqlgen-depth-limit-extension v0.1.0
• github.com/patrickmn/go-cache v2.1.0+incompatible
• github.com/prometheus/client_golang v1.23.2
• github.com/samber/lo v1.53.0
• github.com/sirupsen/logrus v1.9.4
• github.com/square/go-jose/v3 v3.0.0-20200630053402-0a67ce9b0693@0a67ce9b0693
• github.com/stretchr/testify v1.11.1
• github.com/valkey-io/valkey-go v1.0.75 → [Updates: v1.0.76]
• github.com/vektah/gqlparser/v2 v2.5.33 → [Updates: v2.5.35]
• golang.org/x/text v0.37.0 → [Updates: v0.38.0]
• golang.org/x/time v0.15.0
• k8s.io/utils v0.0.0-20241210054802-24370beab758@24370beab758 → [Updates: v0.0.0-20260617174310-a95e086a2553]
• github.com/openfga/language/pkg/go v0.2.1 → [Updates: v0.3.0]
• golang.org/x/sync v0.20.0 → [Updates: v0.21.0]

scanner/k8s-assets/go.mod (13)

• go 1.26.0
• github.com/Khan/genqlient v0.8.1
• github.com/cloudoperators/heureka v1.54.2 → [Updates: v1.54.3, v1.66.0]
• github.com/onsi/ginkgo/v2 v2.28.1 → [Updates: v2.28.3, v2.32.0]
• github.com/onsi/gomega v1.39.1 → [Updates: v1.42.1]
• k8s.io/client-go v0.34.2 → [Updates: v0.34.9, v0.36.1]
• github.com/google/uuid v1.6.0
• github.com/kelseyhightower/envconfig v1.4.0
• github.com/sirupsen/logrus v1.9.4
• golang.org/x/time v0.15.0
• gopkg.in/yaml.v2 v2.4.0 → [Updates: v3.0.1]
• k8s.io/api v0.34.2 → [Updates: v0.34.9, v0.36.1]
• k8s.io/apimachinery v0.34.2 → [Updates: v0.34.9, v0.36.1]

scanner/keppel/go.mod (15)

• go 1.26.0
• github.com/Khan/genqlient v0.8.1
• github.com/aquasecurity/trivy v0.68.0 → [Updates: v0.68.2, v0.71.2]
• github.com/cloudoperators/heureka v1.54.2 → [Updates: v1.54.3, v1.66.0]
• github.com/google/uuid v1.6.0
• github.com/gophercloud/gophercloud v1.14.1 → [Updates: v2.12.0]
• github.com/kelseyhightower/envconfig v1.4.0
• github.com/onsi/ginkgo/v2 v2.28.1 → [Updates: v2.28.3, v2.32.0]
• github.com/onsi/gomega v1.39.1 → [Updates: v1.42.1]
• github.com/sapcc/go-api-declarations v1.18.0 → [Updates: v1.24.0]
• github.com/sapcc/go-bits v0.0.0-20251127001757-54a64663b18f@54a64663b18f → [Updates: v0.0.0-20260623114633-b9734b46a368]
• github.com/samber/lo v1.53.0
• github.com/sirupsen/logrus v1.9.4
• golang.org/x/time v0.15.0
• k8s.io/client-go v0.34.2 → [Updates: v0.34.9, v0.36.1]

scanner/nvd/go.mod (7)

• go 1.26.0
• golang.org/x/time v0.15.0
• github.com/Khan/genqlient v0.8.1
• github.com/cloudoperators/heureka v1.54.2 → [Updates: v1.54.3, v1.66.0]
• github.com/kelseyhightower/envconfig v1.4.0
• github.com/sirupsen/logrus v1.9.4
• k8s.io/client-go v0.34.2 → [Updates: v0.34.9, v0.36.1]

scanner/playground/go.mod (4)

• go 1.23.0
• github.com/jedib0t/go-pretty/v6 v6.5.9 → [Updates: v6.8.1]
• k8s.io/apimachinery v0.31.0 → [Updates: v0.31.14, v0.36.1]
• k8s.io/client-go v0.31.0 → [Updates: v0.31.14, v0.36.1]

tools/oidc_provider_mock/go.mod (2)

• go 1.26.0
• github.com/cloudoperators/heureka v1.27.1 → [Updates: v1.66.0]

tools/token_generator/go.mod (2)

• go 1.22.6
• github.com/golang-jwt/jwt/v5 v5.2.2 → [Updates: v5.2.3, v5.3.1]

helm-values (4)

scanner/k8s-assets/chart/k8s-assets-scanner/values.yaml

scanner/keppel/chart/keppel-scanner/values.yaml

scanner/nvd/chart/nvd-scanner/values.yaml

scanner/playground/k8s-playground/values.yaml

helmv3 (1)

charts/heureka/Chart.yaml (1)

• mariadb 19.0.3 → [Updates: 19.0.7, 19.1.2, 26.1.6]

renovate-config (1)

.github/renovate.json

---

• Check this box to trigger a request for Renovate to run again on this repository

[github-actions]

This issue is stale because it has been open for 90 days with no activity.

[github-actions]

This issue was closed because it has been inactive for 14 days since being marked as stale.