Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Config Migration Needed

• Select this checkbox to let Renovate create an automated Config Migration PR.

Pending Approval

The following branches are pending approval. To create them, click on a checkbox below.

• chore(deps): update dependency go to v1.24.13
• chore(deps): update docker images (patch)
• chore(deps): update helm release mariadb to v19.0.7
• fix(deps): update golang dependencies (patch) (github.com/aquasecurity/trivy, github.com/golang-jwt/jwt/v5, github.com/sirupsen/logrus, k8s.io/api, k8s.io/apimachinery, k8s.io/client-go)
• chore(deps): update dependency go to v1.26.0
• chore(deps): update dependency python to 3.14
• chore(deps): update docker images (minor)
• chore(deps): update helm release mariadb to v19.1.2
• fix(deps): update golang dependencies (minor) (github.com/aquasecurity/trivy, github.com/cloudoperators/heureka, github.com/golang-jwt/jwt/v5, github.com/jedib0t/go-pretty/v6, github.com/onsi/ginkgo/v2, github.com/onsi/gomega, github.com/sapcc/go-bits, golang.org/x/exp, golang.org/x/text, k8s.io/utils)
• fix(deps): update kubernetes packages (minor) (k8s.io/api, k8s.io/apimachinery, k8s.io/client-go)
• chore(deps): update dependency node to v24
• chore(deps): update docker images (major) (node, postgres, valkey/valkey)
• chore(deps): update helm release mariadb to v24
• fix(deps): update golang dependencies (major) (github.com/gophercloud/gophercloud, gopkg.in/yaml.v2)
• 🔐 Create all pending approval PRs at once 🔐

Detected Dependencies

docker-compose (1)

docker-compose.yaml (2)

• valkey/valkey 7.2 → [Updates: 9.0]
• postgres 17 → [Updates: 18]

dockerfile (8)

.devcontainer/Dockerfile

Dockerfile (1)

• golang 1.26rc3 → [Updates: 1.26]

Dockerfile.db

scanner/k8s-assets/Dockerfile (1)

• golang 1.25.4 → [Updates: 1.25.7, 1.26.0]

scanner/keppel/Dockerfile (1)

• golang 1.25.4 → [Updates: 1.25.7, 1.26.0]

scanner/nvd/Dockerfile (1)

• golang 1.25.4 → [Updates: 1.25.7, 1.26.0]

tools/oidc_provider_mock/Dockerfile (1)

• golang 1.23 → [Updates: 1.26]

ui/Dockerfile (2)

• node 20-bullseye → [Updates: 24-bullseye]
• node 20-bullseye → [Updates: 24-bullseye]

github-actions (10)

.github/workflows/check-migration-files.yaml (1)

• actions/checkout v6

.github/workflows/codeql.yaml

.github/workflows/graphql-inspector.yml (8)

• actions/create-github-app-token v2
• actions/checkout v6
• actions/checkout v6
• actions/setup-node v6
• actions/github-script v8
• actions/github-script v8
• rtCamp/action-slack-notify v2
• node 18 → [Updates: 24]

.github/workflows/helm-release.yaml (6)

• actions/checkout v6
• azure/setup-helm v4.3.1
• actions/setup-python v6
• docker/login-action v3
• tj-actions/changed-files v47
• python 3.9 → [Updates: 3.14]

.github/workflows/license.yaml

.github/workflows/release.yaml (12)

• actions/checkout v6
• actions/setup-node v6
• codfish/semantic-release-action v5
• actions/checkout v6
• sigstore/cosign-installer v4.0.0
• docker/setup-qemu-action v3
• docker/setup-buildx-action v3
• docker/login-action v3
• docker/metadata-action v5
• docker/build-push-action v6
• github/codeql-action v4
• node 18 → [Updates: 24]

.github/workflows/reuse.yaml

.github/workflows/stale.yaml

.github/workflows/sync-issues-to-jira.yaml (1)

• actions/checkout v6

.github/workflows/tests.yaml (3)

• actions/checkout v6
• actions/setup-go v6
• valkey/valkey 7.2 → [Updates: 9.0]

gomod (7)

go.mod (30)

• go 1.25
• github.com/99designs/gqlgen v0.17.86
• github.com/brianvoe/gofakeit/v7 v7.14.0
• github.com/coreos/go-oidc v2.5.0+incompatible
• github.com/gin-contrib/cors v1.7.6
• github.com/gin-gonic/gin v1.11.0
• github.com/go-sql-driver/mysql v1.9.3
• github.com/goark/go-cvss v1.6.7
• github.com/golang-jwt/jwt/v5 v5.3.1
• github.com/golang-migrate/migrate/v4 v4.19.1
• github.com/jmoiron/sqlx v1.4.0
• github.com/kelseyhightower/envconfig v1.4.0
• github.com/machinebox/graphql v0.2.2
• github.com/olekukonko/tablewriter v1.1.3
• github.com/onsi/ginkgo/v2 v2.28.1
• github.com/onsi/gomega v1.39.1
• github.com/onuryilmaz/ginprom v0.0.2
• github.com/openfga/go-sdk v0.7.4
• github.com/patrickmn/go-cache v2.1.0+incompatible
• github.com/prometheus/client_golang v1.23.2
• github.com/samber/lo v1.52.0
• github.com/sirupsen/logrus v1.9.4
• github.com/square/go-jose/v3 v3.0.0-20200630053402-0a67ce9b0693@0a67ce9b0693
• github.com/stretchr/testify v1.11.1
• github.com/valkey-io/valkey-go v1.0.71
• golang.org/x/exp v0.0.0-20250305212735-054e65f0b394@054e65f0b394 → [Updates: v0.0.0-20260211191109-2735e65f0518]
• golang.org/x/text v0.33.0 → [Updates: v0.34.0]
• golang.org/x/time v0.14.0
• k8s.io/utils v0.0.0-20241210054802-24370beab758@24370beab758 → [Updates: v0.0.0-20260210185600-b8788abfbbc2]
• github.com/openfga/language/pkg/go v0.2.0-beta.2

scanner/k8s-assets/go.mod (12)

• go 1.24.0
• go 1.24.1 → [Updates: 1.24.13, 1.26.0]
• github.com/Khan/genqlient v0.8.1
• github.com/onsi/ginkgo/v2 v2.21.0 → [Updates: v2.28.1]
• github.com/onsi/gomega v1.35.1 → [Updates: v1.39.1]
• k8s.io/client-go v0.34.2 → [Updates: v0.34.4, v0.35.0]
• github.com/google/uuid v1.6.0
• github.com/kelseyhightower/envconfig v1.4.0
• github.com/sirupsen/logrus v1.9.3 → [Updates: v1.9.4]
• gopkg.in/yaml.v2 v2.4.0 → [Updates: v3.0.1]
• k8s.io/api v0.34.2 → [Updates: v0.34.4, v0.35.0]
• k8s.io/apimachinery v0.34.2 → [Updates: v0.34.4, v0.35.1]

scanner/keppel/go.mod (14)

• go 1.25
• github.com/Khan/genqlient v0.8.1
• github.com/aquasecurity/trivy v0.68.0 → [Updates: v0.68.2, v0.69.1]
• github.com/google/uuid v1.6.0
• github.com/gophercloud/gophercloud v1.14.1 → [Updates: v2.10.0]
• github.com/kelseyhightower/envconfig v1.4.0
• github.com/onsi/ginkgo/v2 v2.23.4 → [Updates: v2.28.1]
• github.com/onsi/gomega v1.37.0 → [Updates: v1.39.1]
• github.com/sapcc/go-api-declarations v1.18.0
• github.com/sapcc/go-bits v0.0.0-20251127001757-54a64663b18f@54a64663b18f → [Updates: v0.0.0-20260212115639-6d3b435be2ec]
• github.com/samber/lo v1.52.0
• github.com/sirupsen/logrus v1.9.4-0.20230606125235-dd1b4c2e81af@dd1b4c2e81af → [Updates: v1.9.4]
• golang.org/x/time v0.14.0
• k8s.io/client-go v0.34.2 → [Updates: v0.34.4, v0.35.0]

scanner/nvd/go.mod (7)

• go 1.24.0
• go 1.24.1 → [Updates: 1.24.13, 1.26.0]
• golang.org/x/time v0.14.0
• github.com/Khan/genqlient v0.8.1
• github.com/kelseyhightower/envconfig v1.4.0
• github.com/sirupsen/logrus v1.9.3 → [Updates: v1.9.4]
• k8s.io/client-go v0.34.2 → [Updates: v0.34.4, v0.35.0]

scanner/playground/go.mod (4)

• go 1.23.0
• github.com/jedib0t/go-pretty/v6 v6.5.9 → [Updates: v6.7.8]
• k8s.io/apimachinery v0.31.0 → [Updates: v0.31.14, v0.35.1]
• k8s.io/client-go v0.31.0 → [Updates: v0.31.14, v0.35.0]

tools/oidc_provider_mock/go.mod (2)

• go 1.25
• github.com/cloudoperators/heureka v1.27.1 → [Updates: v1.42.1]

tools/token_generator/go.mod (2)

• go 1.22.6
• github.com/golang-jwt/jwt/v5 v5.2.2 → [Updates: v5.2.3, v5.3.1]

helm-values (4)

scanner/k8s-assets/chart/k8s-assets-scanner/values.yaml

scanner/keppel/chart/keppel-scanner/values.yaml

scanner/nvd/chart/nvd-scanner/values.yaml

scanner/playground/k8s-playground/values.yaml

helmv3 (1)

charts/heureka/Chart.yaml (1)

• mariadb 19.0.3 → [Updates: 19.0.7, 19.1.2, 24.1.1]

---

• Check this box to trigger a request for Renovate to run again on this repository

[github-actions]

This issue is stale because it has been open for 90 days with no activity.

[github-actions]

This issue was closed because it has been inactive for 14 days since being marked as stale.