Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Abandoned Dependencies

The following dependencies have not received updates for an extended period and may be unmaintained.

Note

Packages are marked as abandoned when they exceed the abandonmentThreshold since their last release. Unlike deprecated packages with official notices, abandonment is detected by release inactivity.

View abandoned dependencies (1)

Datasource	Package	Last Updated
gomod	github.com/distribution/reference	2024-03-26

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): update gcr.io/distroless/static:nonroot docker digest to e2e927e
• chore(deps): update golang:1.26 docker digest to 2dbae74
• ci(deps): update anchore/sbom-action action to v0.24.3
• chore(deps): update golang docker tag
• chore(deps): update module github.com/approvals/go-approval-tests to v1.15.0
• ci(deps): update docker/setup-buildx-action action to v4.4.1
• ci(deps): update docker/setup-qemu-action action to v4.4.0
• fix(deps): update kubernetes monorepo to v0.37.1 (k8s.io/api, k8s.io/apimachinery, k8s.io/client-go)
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

asdf (1)

.tool-versions (1)

• golang 1.26.5 → [Updates: 1.27.1]

dockerfile (2)

Dockerfile (2)

• golang 1.26@sha256:2005724102f45917a63e9d092fc0e4ea56ea575048ce147caad5f5f61502c365 → [Updates: 1.27, 1.26]
• gcr.io/distroless/static nonroot@sha256:f7f8f729987ad0fdf6b05eeeae94b26e6a0f613bdf46feea7fc40f7bd72953e6 → [Updates: nonroot]

Dockerfile.goreleaser (1)

• gcr.io/distroless/static nonroot@sha256:f7f8f729987ad0fdf6b05eeeae94b26e6a0f613bdf46feea7fc40f7bd72953e6 → [Updates: nonroot]

github-actions (2)

.github/workflows/release.yml (11)

• googleapis/release-please-action v5.0.0@45996ed1f6d02564a971a2fa1b5860e934307cf7
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/setup-go v7.0.0@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e
• docker/setup-qemu-action v4.2.0@96fe6ef7f33517b61c61be40b68a1882f3264fb8 → [Updates: v4.4.0]
• docker/setup-buildx-action v4.2.0@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c → [Updates: v4.4.1]
• docker/login-action v4.6.0@dbcb813823bdd20940b903addbd779551569679f
• sigstore/cosign-installer v4.1.2@6f9f17788090df1f26f669e9d70d6ae9567deba6
• anchore/sbom-action v0.24.0@e22c389904149dbc22b58101806040fa8d37a610 → [Updates: v0.24.3]
• goreleaser/goreleaser-action v7.2.3@f06c13b6b1a9625abc9e6e439d9c05a8f2190e94
• actions/attest-build-provenance v4.2.2@4d101475d8b20a2381f78447822ac1eab6504dd8
• goreleaser/goreleaser ~> v2

.github/workflows/test.yml (3)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/setup-go v7.0.0@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e
• golang/govulncheck-action v1.1.0@032d45514ae346b1db93c04b0c90b841c370344f

gomod (1)

go.mod (6)

• go 1.26.0
• github.com/approvals/go-approval-tests v1.14.0 → [Updates: v1.15.0]
• github.com/distribution/reference v0.6.0
• k8s.io/api v0.36.3 → [Updates: v0.37.1]
• k8s.io/apimachinery v0.36.3 → [Updates: v0.37.1]
• k8s.io/client-go v0.36.3 → [Updates: v0.37.1]

---

• Check this box to trigger a request for Renovate to run again on this repository