Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Config Migration Needed

• Select this checkbox to let Renovate create an automated Config Migration PR.

Repository Problems

These problems occurred while renovating this repository. View logs.

• ⚠️ WARN: Package lookup failures

Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

• chore(deps): update gcr.io/distroless/static:nonroot docker digest to 1c2c046
• chore(deps-dev): update anchore/sbom-action action to v0.24.2
• chore(deps-dev): update github/codeql-action action to v4.37.9
• chore(deps-dev): update shogo82148/actions-goveralls action to v1.11.2
• chore(deps): update ghcr.io/doodlescheduling/keycloak-controller docker tag to v2.6.2
• chore(deps): update kubernetes monorepo to v0.37.0 (k8s.io/apimachinery, k8s.io/client-go)
• chore(deps): update module github.com/onsi/gomega to v1.43.0
• chore(deps): update module go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp to v0.71.0
• chore(deps): update quay.io/brancz/kube-rbac-proxy docker tag to v0.22.1

---

Warning

Renovate failed to look up the following dependencies: Failed to look up go package github.com/go-logr/logr: no-result, Failed to look up go package k8s.io/api: no-result, Failed to look up go package k8s.io/apiextensions-apiserver: no-result.

Files affected: go.mod

---

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps-dev): update dependency go to 1.27.x
• chore(deps): update module github.com/golangci/golangci-lint/v2/cmd/golangci-lint to v2.13.1
• chore(deps): update module sigs.k8s.io/kustomize/kustomize/v4 to v5
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

dockerfile (2)

Dockerfile (1)

• gcr.io/distroless/static nonroot@sha256:f7f8f729987ad0fdf6b05eeeae94b26e6a0f613bdf46feea7fc40f7bd72953e6 → [Updates: nonroot]

proxy/Dockerfile (1)

• gcr.io/distroless/static nonroot@sha256:f7f8f729987ad0fdf6b05eeeae94b26e6a0f613bdf46feea7fc40f7bd72953e6 → [Updates: nonroot]

github-actions (12)

.github/workflows/main.yaml (5)

• step-security/harden-runner v2.21.0@05e31511f85b41b11d1cf0ef85d0992719546e2c
• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/setup-go v7.0.0@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e
• shogo82148/actions-goveralls v1.11.1@8781f5dd05b691c4dd042d5e859c11c73e0104fa → [Updates: v1.11.2]
• go 1.26.x → [Updates: 1.27.x]

.github/workflows/pr-actions.yaml (3)

• step-security/harden-runner v2.21.0@05e31511f85b41b11d1cf0ef85d0992719546e2c
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• zgosalvez/github-actions-ensure-sha-pinned-actions v5.0.7@c5fc58bd0be7a4b94b73ce40250322d5b838a108

.github/workflows/pr-build.yaml (33)

• step-security/harden-runner v2.21.0@05e31511f85b41b11d1cf0ef85d0992719546e2c
• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• azure/setup-helm v5.0.1@9bc31f4ebc9c6b171d7bfbaa5d006ae7abdb4310
• actions/setup-python v7.0.0@5fda3b95a4ea91299a34e894583c3862153e4b97
• helm/chart-testing-action v2.8.0@6ec842c01de15ebb84c8627d2744a0c2f2755c9f
• step-security/harden-runner v2.21.0@05e31511f85b41b11d1cf0ef85d0992719546e2c
• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/setup-go v7.0.0@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e
• step-security/harden-runner v2.21.0@05e31511f85b41b11d1cf0ef85d0992719546e2c
• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/setup-go v7.0.0@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e
• step-security/harden-runner v2.21.0@05e31511f85b41b11d1cf0ef85d0992719546e2c
• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/setup-go v7.0.0@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• step-security/harden-runner v2.21.0@05e31511f85b41b11d1cf0ef85d0992719546e2c
• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• engineerd/setup-kind v0.5.0@aa272fe2a7309878ffc2a81c56cfe3ef108ae7d0
• actions/download-artifact v8.0.1@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• imranismail/setup-kustomize v3.0.0@53f941b41dca13ed61874bbc6b4b6e1562877530
• step-security/harden-runner v2.21.0@05e31511f85b41b11d1cf0ef85d0992719546e2c
• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• azure/setup-helm v5.0.1@9bc31f4ebc9c6b171d7bfbaa5d006ae7abdb4310
• actions/setup-python v7.0.0@5fda3b95a4ea91299a34e894583c3862153e4b97
• helm/chart-testing-action v2.8.0@6ec842c01de15ebb84c8627d2744a0c2f2755c9f
• helm/kind-action v1.14.0@ef37e7f390d99f746eb8b610417061a60e82a6cc
• actions/download-artifact v8.0.1@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• helm v4.2.4
• python 3.14
• go 1.26.x → [Updates: 1.27.x]
• go 1.26.x → [Updates: 1.27.x]
• go 1.26.x → [Updates: 1.27.x]
• python 3.14

.github/workflows/pr-goreleaser.yaml (3)

• step-security/harden-runner v2.21.0@05e31511f85b41b11d1cf0ef85d0992719546e2c
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• goreleaser/goreleaser-action v7.2.3@f06c13b6b1a9625abc9e6e439d9c05a8f2190e94

.github/workflows/pr-label.yaml (1)

• step-security/harden-runner v2.21.0@05e31511f85b41b11d1cf0ef85d0992719546e2c

.github/workflows/pr-stale.yaml (1)

• actions/stale v11.0.0@4391f3da665fdf50b6810c1a66712fb9ba21aa93

.github/workflows/pr-trivy.yaml (3)

• step-security/harden-runner v2.21.0@05e31511f85b41b11d1cf0ef85d0992719546e2c
• aquasecurity/trivy-action v0.36.0@ed142fd0673e97e23eac54620cfb913e5ce36c25
• github/codeql-action v4.37.8@db488ddef3bf6cb639b32c2e9a7c0a7ea8271d28 → [Updates: v4.37.9]

.github/workflows/rebase.yaml (3)

• step-security/harden-runner v2.21.0@05e31511f85b41b11d1cf0ef85d0992719546e2c
• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• cirrus-actions/rebase 1.8@b87d48154a87a85666003575337e27b8cd65f691

.github/workflows/release.yaml (12)

• step-security/harden-runner v2.21.0@05e31511f85b41b11d1cf0ef85d0992719546e2c
• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/setup-go v7.0.0@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e
• docker/login-action v4.6.0@dbcb813823bdd20940b903addbd779551569679f
• sigstore/cosign-installer v4.1.2@6f9f17788090df1f26f669e9d70d6ae9567deba6
• anchore/sbom-action v0.24.0@e22c389904149dbc22b58101806040fa8d37a610 → [Updates: v0.24.2]
• goreleaser/goreleaser-action v7.2.3@f06c13b6b1a9625abc9e6e439d9c05a8f2190e94
• step-security/harden-runner v2.21.0@05e31511f85b41b11d1cf0ef85d0992719546e2c
• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• azure/setup-helm v5.0.1@9bc31f4ebc9c6b171d7bfbaa5d006ae7abdb4310
• sigstore/cosign-installer v4.1.2@6f9f17788090df1f26f669e9d70d6ae9567deba6
• go 1.26.x → [Updates: 1.27.x]

.github/workflows/report-on-vulnerabilities.yaml (7)

• step-security/harden-runner v2.21.0@05e31511f85b41b11d1cf0ef85d0992719546e2c
• aquasecurity/trivy-action v0.36.0@ed142fd0673e97e23eac54620cfb913e5ce36c25
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• step-security/harden-runner v2.21.0@05e31511f85b41b11d1cf0ef85d0992719546e2c
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/download-artifact v8.0.1@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• JasonEtco/create-an-issue v2.9.2@1b14a70e4d8dc185e5cc76d3bec9eab20257b2c5

.github/workflows/scan.yaml (5)

• step-security/harden-runner v2.21.0@05e31511f85b41b11d1cf0ef85d0992719546e2c
• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• github/codeql-action codeql-bundle-20221020@f0a12816612c7306b485a22cb164feb43c6df818
• github/codeql-action codeql-bundle-20221020@f0a12816612c7306b485a22cb164feb43c6df818
• github/codeql-action codeql-bundle-20221020@f0a12816612c7306b485a22cb164feb43c6df818

.github/workflows/scorecard.yaml (5)

• step-security/harden-runner v2.21.0@05e31511f85b41b11d1cf0ef85d0992719546e2c
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• ossf/scorecard-action v2.4.4@2d1146689b8cda280b9bc96326124645441f03bc
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• github/codeql-action v4.37.8@db488ddef3bf6cb639b32c2e9a7c0a7ea8271d28 → [Updates: v4.37.9]

gomod (1)

go.mod (19)

• go 1.26.0
• github.com/fluxcd/pkg/runtime v0.111.0
• github.com/go-logr/logr v1.4.4
• github.com/kylelemons/godebug v1.1.0
• github.com/onsi/ginkgo/v2 v2.32.1
• github.com/onsi/gomega v1.42.1 → [Updates: v1.43.0]
• github.com/spf13/pflag v1.0.10
• github.com/stretchr/testify v1.12.1
• github.com/tj/assert v0.0.3
• go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.70.0 → [Updates: v0.71.0]
• go.opentelemetry.io/otel v1.46.0
• go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.46.0
• go.opentelemetry.io/otel/sdk v1.46.0
• google.golang.org/grpc v1.83.2
• k8s.io/api v0.36.4
• k8s.io/apiextensions-apiserver v0.36.4
• k8s.io/apimachinery v0.36.4 → [Updates: v0.37.0]
• k8s.io/client-go v0.36.4 → [Updates: v0.37.0]
• sigs.k8s.io/controller-runtime v0.24.1

helm-values (1)

chart/keycloak-controller/values.yaml (1)

• quay.io/brancz/kube-rbac-proxy v0.20.0 → [Updates: v0.22.1]

kustomize (1)

config/base/manager/kustomization.yaml (1)

• ghcr.io/doodlescheduling/keycloak-controller v2.6.0 → [Updates: v2.6.2]

regex (2)

Makefile (4)

• github.com/ahmetb/gen-crd-api-reference-docs v0.3.0
• sigs.k8s.io/controller-tools/cmd/controller-gen v0.21.0
• github.com/golangci/golangci-lint/v2/cmd/golangci-lint v2.1.2 → [Updates: v2.13.1]
• sigs.k8s.io/kustomize/kustomize/v4 v4.5.7 → [Updates: v5.8.1]

Makefile (1)

• sigs.k8s.io/controller-runtime/tools/setup-envtest release-0.22

renovate-config (1)

renovate.json

---

• Check this box to trigger a request for Renovate to run again on this repository