Dependency Dashboard

[red-hat-konflux-kflux-prd-rh03]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Repository Problems

Renovate tried to run on this repository, but found these problems.

• ⚠️ WARN: Cannot access vulnerability alerts. Please ensure permissions have been granted.
• ⚠️ WARN: Dependency name is unset, skipping

Abandoned Dependencies

The following dependencies have not received updates for an extended period and may be unmaintained.

View abandoned dependencies (28)

[!NOTE]
Packages are marked as abandoned when they exceed the abandonmentThreshold since their last release. Unlike deprecated packages with official notices, abandonment is detected by release inactivity.

Datasource	Package	Last Updated
gomod	cloud.google.com/go/auth/oauth2adapt	2025-03-20
gomod	github.com/beorn7/perks	2019-07-31
gomod	github.com/cespare/xxhash/v2	2024-04-04
gomod	github.com/davecgh/go-spew	2018-02-21
gomod	github.com/evanphx/json-patch	2025-01-28
gomod	github.com/evanphx/json-patch/v5	2025-01-28
gomod	github.com/go-logr/logr	2025-05-19
gomod	github.com/go-logr/stdr	2021-12-14
gomod	github.com/go-logr/zapr	2023-11-03
gomod	github.com/golang/mock	2022-05-12
gomod	github.com/google/go-cmp	2025-01-14
gomod	github.com/google/s2a-go	2025-01-06
gomod	github.com/google/uuid	2024-01-23
gomod	github.com/json-iterator/go	2021-09-11
gomod	github.com/modern-go/concurrent	2018-03-06
gomod	github.com/modern-go/reflect2	2021-09-11
gomod	github.com/munnerz/goautoneg	2019-10-10
gomod	github.com/nxadm/tail	2023-10-10
gomod	github.com/pmezard/go-difflib	2016-01-10
gomod	github.com/prometheus/client_model	2025-04-11
gomod	github.com/x448/float16	2020-01-17
gomod	go.uber.org/multierr	2023-03-29
gomod	gopkg.in/evanphx/json-patch.v4	2025-01-28
gomod	gopkg.in/inf.v0	2018-03-26
gomod	gopkg.in/tomb.v1	2014-10-24
gomod	gopkg.in/yaml.v2	2022-05-27
gomod	gopkg.in/yaml.v3	2022-05-27
gomod	sigs.k8s.io/randfill	2025-03-04

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• fix(deps): update gomod dependencies (cloud.google.com/go/auth, github.com/go-openapi/jsonpointer, github.com/go-openapi/swag, github.com/go-openapi/swag/cmdutils, github.com/go-openapi/swag/conv, github.com/go-openapi/swag/fileutils, github.com/go-openapi/swag/jsonname, github.com/go-openapi/swag/jsonutils, github.com/go-openapi/swag/loading, github.com/go-openapi/swag/mangling, github.com/go-openapi/swag/netutils, github.com/go-openapi/swag/stringutils, github.com/go-openapi/swag/typeutils, github.com/go-openapi/swag/yamlutils, github.com/googleapis/enterprise-certificate-proxy, github.com/googleapis/gax-go/v2, github.com/prometheus/common, github.com/prometheus/procfs, golang.org/x/crypto, golang.org/x/mod, golang.org/x/net, golang.org/x/sync, golang.org/x/sys, golang.org/x/term, golang.org/x/text, golang.org/x/tools, google.golang.org/api, google.golang.org/genproto/googleapis/rpc, google.golang.org/grpc, k8s.io/kube-openapi, k8s.io/utils, sigs.k8s.io/structured-merge-diff/v6)
• chore(deps): update go-openapi packages to v1 (github.com/go-openapi/jsonpointer, github.com/go-openapi/jsonreference)
• chore(deps): update module go.yaml.in/yaml/v2 to v3
• chore(deps): update module gomodules.xyz/jsonpatch/v2 to v3
• chore(deps): update module gopkg.in/evanphx/json-patch.v4 to v5
• fix(deps): update module github.com/cenkalti/backoff/v4 to v7
• fix(deps): update module github.com/onsi/ginkgo to v2
• fix(deps): update module gopkg.in/yaml.v2 to v3
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

gomod (1)

go.mod (98)

• go 1.26.0
• github.com/cenkalti/backoff/v4 v4.3.0 → [Updates: v7.0.0]
• github.com/go-logr/logr v1.4.3
• github.com/golang/mock v1.6.0
• github.com/google/uuid v1.6.0
• github.com/onsi/ginkgo v1.16.5 → [Updates: v2.32.0]
• github.com/onsi/gomega v1.42.1
• github.com/stretchr/testify v1.11.1
• go.uber.org/mock v0.6.0
• golang.org/x/oauth2 v0.36.0
• google.golang.org/api v0.286.0 → [Updates: v0.288.0]
• gopkg.in/yaml.v2 v2.4.0 → [Updates: v3.0.1]
• k8s.io/api v0.36.2
• k8s.io/apimachinery v0.36.2
• k8s.io/client-go v0.36.2
• k8s.io/code-generator v0.36.2
• k8s.io/gengo v0.0.0-20260408192533-25e2208e0dc3@25e2208e0dc3
• k8s.io/kube-openapi v0.0.0-20260624041617-8f3fa4921821@8f3fa4921821 → [Updates: v0.0.0-20260706235625-cdb1db5517a0]
• sigs.k8s.io/controller-runtime v0.24.1
• cloud.google.com/go/auth v0.20.0 → [Updates: v0.21.0]
• cloud.google.com/go/auth/oauth2adapt v0.2.8
• cloud.google.com/go/compute/metadata v0.9.0
• github.com/beorn7/perks v1.0.1
• github.com/cespare/xxhash/v2 v2.3.0
• github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc@d8f796af33cc
• github.com/emicklei/go-restful/v3 v3.13.0
• github.com/evanphx/json-patch v5.9.11+incompatible
• github.com/evanphx/json-patch/v5 v5.9.11
• github.com/felixge/httpsnoop v1.1.0
• github.com/fsnotify/fsnotify v1.10.1
• github.com/fxamacker/cbor/v2 v2.9.2
• github.com/go-logr/stdr v1.2.2
• github.com/go-logr/zapr v1.3.0
• github.com/go-openapi/jsonpointer v0.23.2 → [Updates: v0.24.0, v1.0.0]
• github.com/go-openapi/jsonreference v0.21.6 → [Updates: v1.0.0]
• github.com/go-openapi/swag v0.26.1 → [Updates: v0.27.0]
• github.com/go-openapi/swag/cmdutils v0.26.1 → [Updates: v0.27.0]
• github.com/go-openapi/swag/conv v0.26.1 → [Updates: v0.27.0]
• github.com/go-openapi/swag/fileutils v0.26.1 → [Updates: v0.27.0]
• github.com/go-openapi/swag/jsonname v0.26.1 → [Updates: v0.27.0]
• github.com/go-openapi/swag/jsonutils v0.26.1 → [Updates: v0.27.0]
• github.com/go-openapi/swag/loading v0.26.1 → [Updates: v0.27.0]
• github.com/go-openapi/swag/mangling v0.26.1 → [Updates: v0.27.0]
• github.com/go-openapi/swag/netutils v0.26.1 → [Updates: v0.27.0]
• github.com/go-openapi/swag/stringutils v0.26.1 → [Updates: v0.27.0]
• github.com/go-openapi/swag/typeutils v0.26.1 → [Updates: v0.27.0]
• github.com/go-openapi/swag/yamlutils v0.26.1 → [Updates: v0.27.0]
• github.com/google/gnostic-models v0.7.1
• github.com/google/go-cmp v0.7.0
• github.com/google/s2a-go v0.1.9
• github.com/googleapis/enterprise-certificate-proxy v0.3.17 → [Updates: v0.3.18]
• github.com/googleapis/gax-go/v2 v2.22.0 → [Updates: v2.23.0]
• github.com/json-iterator/go v1.1.12
• github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd@bacd9c7ef1dd
• github.com/modern-go/reflect2 v1.0.3-0.20250322232337-35a7c28c31ee@35a7c28c31ee
• github.com/munnerz/goautoneg v0.0.0-20191010083416-a7dc8b61c822@a7dc8b61c822
• github.com/nxadm/tail v1.4.11
• github.com/pmezard/go-difflib v1.0.1-0.20181226105442-5d4384ee4fb2@5d4384ee4fb2
• github.com/prometheus/client_golang v1.23.2
• github.com/prometheus/client_model v0.6.2
• github.com/prometheus/common v0.69.0 → [Updates: v0.70.0]
• github.com/prometheus/procfs v0.21.0 → [Updates: v0.21.1]
• github.com/spf13/pflag v1.0.10
• github.com/x448/float16 v0.8.4
• go.opentelemetry.io/auto/sdk v1.2.1
• go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.69.0
• go.opentelemetry.io/otel v1.44.0
• go.opentelemetry.io/otel/metric v1.44.0
• go.opentelemetry.io/otel/trace v1.44.0
• go.uber.org/multierr v1.11.0
• go.uber.org/zap v1.28.0
• go.yaml.in/yaml/v2 v2.4.4 → [Updates: v3.0.4]
• go.yaml.in/yaml/v3 v3.0.4
• golang.org/x/crypto v0.53.0 → [Updates: v0.54.0]
• golang.org/x/mod v0.37.0 → [Updates: v0.38.0]
• golang.org/x/net v0.56.0 → [Updates: v0.57.0]
• golang.org/x/sync v0.21.0 → [Updates: v0.22.0]
• golang.org/x/sys v0.46.0 → [Updates: v0.47.0]
• golang.org/x/term v0.44.0 → [Updates: v0.45.0]
• golang.org/x/text v0.38.0 → [Updates: v0.40.0]
• golang.org/x/time v0.15.0
• golang.org/x/tools v0.47.0 → [Updates: v0.48.0]
• gomodules.xyz/jsonpatch/v2 v2.5.0 → [Updates: v3.0.1]
• google.golang.org/genproto/googleapis/rpc v0.0.0-20260622175928-b703f567277d@b703f567277d → [Updates: v0.0.0-20260706201446-f0a921348800]
• google.golang.org/grpc v1.81.1 → [Updates: v1.82.0]
• google.golang.org/protobuf v1.36.12-0.20260120151049-f2248ac996af@f2248ac996af
• gopkg.in/evanphx/json-patch.v4 v4.13.0 → [Updates: v5.9.11]
• gopkg.in/inf.v0 v0.9.1
• gopkg.in/tomb.v1 v1.0.0-20141024135613-dd632973f1e7@dd632973f1e7
• gopkg.in/yaml.v3 v3.0.1
• k8s.io/apiextensions-apiserver v0.36.2
• k8s.io/gengo/v2 v2.0.0-20260408192533-25e2208e0dc3@25e2208e0dc3
• k8s.io/klog/v2 v2.140.0
• k8s.io/utils v0.0.0-20260626114624-be93311217bd@be93311217bd → [Updates: v0.0.0-20260707023825-cf1189d6abe3]
• sigs.k8s.io/json v0.0.0-20250730193827-2d320260d730@2d320260d730
• sigs.k8s.io/randfill v1.0.0
• sigs.k8s.io/structured-merge-diff/v6 v6.4.0 → [Updates: v6.4.2]
• sigs.k8s.io/yaml v1.6.0

tekton (4)

.tekton/gcp-project-operator-pko-pull-request.yaml

.tekton/gcp-project-operator-pko-push.yaml

.tekton/gcp-project-operator-pull-request.yaml

.tekton/gcp-project-operator-push.yaml

[openshift-bot]

Issues go stale after 90d of inactivity.

Mark the issue as fresh by commenting /remove-lifecycle stale.
Stale issues rot after an additional 30d of inactivity and eventually close.
Exclude this issue from closing by commenting /lifecycle frozen.

If this issue is safe to close now please do so with /close.

/lifecycle stale

[openshift-bot]

Stale issues rot after 30d of inactivity.

Mark the issue as fresh by commenting /remove-lifecycle rotten.
Rotten issues close after an additional 30d of inactivity.
Exclude this issue from closing by commenting /lifecycle frozen.

If this issue is safe to close now please do so with /close.

/lifecycle rotten
/remove-lifecycle stale

[openshift-bot]

Rotten issues close after 30d of inactivity.

Reopen the issue by commenting /reopen.
Mark the issue as fresh by commenting /remove-lifecycle rotten.
Exclude this issue from closing again by commenting /lifecycle frozen.

/close

[openshift-ci]

@openshift-bot: Closing this issue.

Details

In response to this:

Rotten issues close after 30d of inactivity.

Reopen the issue by commenting /reopen.
Mark the issue as fresh by commenting /remove-lifecycle rotten.
Exclude this issue from closing again by commenting /lifecycle frozen.

/close

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

[openshift-bot]

Rotten issues close after 30d of inactivity.

Reopen the issue by commenting /reopen.
Mark the issue as fresh by commenting /remove-lifecycle rotten.
Exclude this issue from closing again by commenting /lifecycle frozen.

/close not-planned

[openshift-ci]

@openshift-bot: Closing this issue, marking it as "Not Planned".

Details

In response to this:

Rotten issues close after 30d of inactivity.

Reopen the issue by commenting /reopen.
Mark the issue as fresh by commenting /remove-lifecycle rotten.
Exclude this issue from closing again by commenting /lifecycle frozen.

/close not-planned

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.