Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• Update goreleaser/goreleaser-action digest to 5daf1e9
• Update golangci/golangci-lint-action action to v9.2.1
• Update module github.com/aws/aws-sdk-go-v2/config to v1.32.18
• Update module github.com/cedar-policy/cedar-go to v1.6.2
• Update module github.com/google/go-containerregistry to v0.21.6
• Update module github.com/mark3labs/mcp-go to v0.54.1
• Update module github.com/pressly/goose/v3 to v3.27.1
• Update module github.com/shirou/gopsutil/v4 to v4.26.4
• Update sigstore/cosign-installer action to v4.1.2
• Update actions/create-github-app-token action to v3.2.0
• Update dependency helm/helm to v3.21.0
• Update ghcr.io/stacklok/thv-registry-api Docker tag to v1.4.5
• Update kubernetes dependencies (k8s.io/api, k8s.io/apiextensions-apiserver, k8s.io/apimachinery, k8s.io/client-go, k8s.io/utils, sigs.k8s.io/controller-runtime)
• Update module github.com/getsentry/sentry-go to v0.46.2
• Update module github.com/getsentry/sentry-go/otel to v0.46.2
• Update module github.com/go-chi/chi/v5 to v5.3.0
• Update module github.com/lestrrat-go/jwx/v3 to v3.1.1
• Update module github.com/testcontainers/testcontainers-go to v0.42.0
• Update module github.com/tidwall/gjson to v1.19.0
• Update module go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp to v0.68.0
• Update module go.uber.org/zap to v1.28.0
• Update module modernc.org/sqlite to v1.50.1
• Update testing libraries (github.com/onsi/ginkgo/v2, github.com/onsi/gomega)
• Update azure/setup-helm action to v5
• Update cli and ui libraries to v2 (github.com/charmbracelet/bubbles, github.com/charmbracelet/bubbletea, github.com/charmbracelet/lipgloss)
• Update codecov/codecov-action action to v6
• Update container build actions (major) (docker/build-push-action, docker/login-action, docker/metadata-action, docker/setup-buildx-action)
• Update core workflow actions (major) (actions/download-artifact, actions/github-script, actions/upload-artifact)
• Update module github.com/lestrrat-go/jwx/v3 to v4
• Update slackapi/slack-github-action action to v3
• 🔐 Create all rate-limited PRs at once 🔐

---

Warning

Renovate failed to look up the following dependencies: Could not determine new digest for update (github-tags package arduino/setup-task), Could not determine new digest for update (github-digest package helm/kind-action).

Files affected: .github/workflows/e2e-tests.yml, .github/workflows/operator-ci.yml, .github/workflows/test-e2e-lifecycle.yml

---

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• Update anthropics/claude-code-action digest to 787c5a0
• Update github/codeql-action digest to 7211b7c
• Update go.starlark.net digest to ec58d4b
• Update module github.com/stacklok/toolhive-core to v0.0.22
• Update module github.com/stacklok/toolhive-catalog to v0.20260520.0
• Click on this checkbox to rebase all open PRs at once

PR Closed (Blocked)

The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.

• Update module github.com/1password/onepassword-sdk-go to v0.4.0
• Update module github.com/go-jose/go-jose/v3 to v4

Detected Dependencies

dockerfile (1)

containers/egress-proxy/Dockerfile (1)

• alpine 3.23.4

github-actions (24)

.github/workflows/api-compat-noop.yml

.github/workflows/api-compat.yml (2)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/setup-go v6@4a3601121dd01d1626a1e23e37211e3254c1c06c

.github/workflows/claude.yml (3)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/setup-go v6@4a3601121dd01d1626a1e23e37211e3254c1c06c
• anthropics/claude-code-action v1@51ea8ea73a139f2a74ff649e3092c25a904aed7e → [Updates: v1]

.github/workflows/create-release-pr.yml (4)

• actions/create-github-app-token v3.1.1@1b10c78c7865c340bc4f6099eb2f838309f1e8c3 → [Updates: v3.2.0]
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/setup-go v6@4a3601121dd01d1626a1e23e37211e3254c1c06c
• stacklok/releaseo v0.0.4@80e8d8131d41cf8763254d02360f2c5ce9b7c0df

.github/workflows/create-release-tag.yml (2)

• actions/create-github-app-token v3.1.1@1b10c78c7865c340bc4f6099eb2f838309f1e8c3 → [Updates: v3.2.0]
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd

.github/workflows/e2e-tests.yml (8)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/setup-go v6@4a3601121dd01d1626a1e23e37211e3254c1c06c
• arduino/setup-task v2@b91d5d2c96a56797b48ac1e0e89220bf64044611
• actions/upload-artifact v6@b7c566a772e6b6bfb58ed0dc250532a479d7789f → [Updates: v7]
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/setup-go v6@4a3601121dd01d1626a1e23e37211e3254c1c06c
• actions/download-artifact v7@37930b1c2abaa49bbe596cd826c3c89aef350131 → [Updates: v8]
• actions/upload-artifact v6@b7c566a772e6b6bfb58ed0dc250532a479d7789f → [Updates: v7]

.github/workflows/helm-charts-test.yml (7)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/setup-go v6@4a3601121dd01d1626a1e23e37211e3254c1c06c
• ko-build/setup-ko v0.9@d006021bd0c28d1ce33a07e7943d48b079944c8d
• azure/setup-helm v4.3.1@1a275c3b69536ee54be43f2070a358922e12c8d4 → [Updates: v5.0.0]
• helm/chart-testing-action v2.8.0@6ec842c01de15ebb84c8627d2744a0c2f2755c9f
• arduino/setup-task v2
• helm/kind-action v1.14.0@ef37e7f390d99f746eb8b610417061a60e82a6cc

.github/workflows/helm-publish.yml (4)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• azure/setup-helm v4@1a275c3b69536ee54be43f2070a358922e12c8d4 → [Updates: v5]
• sigstore/cosign-installer v4.1.1@cad07c2e89fa2edd6e2d7bab4c1aa38e53f76003 → [Updates: v4.1.2]

.github/workflows/image-build-and-publish.yml (29)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/setup-go v6@4a3601121dd01d1626a1e23e37211e3254c1c06c
• docker/login-action v3.7.0@c94ce9fb468520275223c153574b00df6fe4bcc9 → [Updates: v4.2.0]
• ko-build/setup-ko v0.9@d006021bd0c28d1ce33a07e7943d48b079944c8d
• sigstore/cosign-installer v4.1.1@cad07c2e89fa2edd6e2d7bab4c1aa38e53f76003 → [Updates: v4.1.2]
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• docker/login-action v3.7.0@c94ce9fb468520275223c153574b00df6fe4bcc9 → [Updates: v4.2.0]
• docker/setup-buildx-action v3.12.0@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f → [Updates: v4.1.0]
• docker/metadata-action v5.10.0@c299e40c65443455700f0fdfc63efafe5b349051 → [Updates: v6.1.0]
• docker/build-push-action v6.19.2@10e90e3645eae34f1e60eeb005ba3a3d33f178e8 → [Updates: v7.2.0]
• sigstore/cosign-installer v4.1.1@cad07c2e89fa2edd6e2d7bab4c1aa38e53f76003 → [Updates: v4.1.2]
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/setup-go v6@4a3601121dd01d1626a1e23e37211e3254c1c06c
• arduino/setup-task v2
• docker/login-action v3.7.0@c94ce9fb468520275223c153574b00df6fe4bcc9 → [Updates: v4.2.0]
• ko-build/setup-ko v0.9@d006021bd0c28d1ce33a07e7943d48b079944c8d
• docker/setup-buildx-action v3.12.0@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f → [Updates: v4.1.0]
• sigstore/cosign-installer v4.1.1@cad07c2e89fa2edd6e2d7bab4c1aa38e53f76003 → [Updates: v4.1.2]
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/setup-go v6@4a3601121dd01d1626a1e23e37211e3254c1c06c
• docker/login-action v3.7.0@c94ce9fb468520275223c153574b00df6fe4bcc9 → [Updates: v4.2.0]
• ko-build/setup-ko v0.9@d006021bd0c28d1ce33a07e7943d48b079944c8d
• docker/setup-buildx-action v3.12.0@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f → [Updates: v4.1.0]
• sigstore/cosign-installer v4.1.1@cad07c2e89fa2edd6e2d7bab4c1aa38e53f76003 → [Updates: v4.1.2]
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/setup-go v6@4a3601121dd01d1626a1e23e37211e3254c1c06c
• docker/login-action v3.7.0@c94ce9fb468520275223c153574b00df6fe4bcc9 → [Updates: v4.2.0]
• ko-build/setup-ko v0.9@d006021bd0c28d1ce33a07e7943d48b079944c8d
• sigstore/cosign-installer v4.1.1@cad07c2e89fa2edd6e2d7bab4c1aa38e53f76003 → [Updates: v4.1.2]

.github/workflows/issue-triage.yml (2)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• anthropics/claude-code-base-action beta@e8132bc5e637a42c27763fc757faa37e1ee43b34

.github/workflows/license-headers.yml (2)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/setup-go v6@4a3601121dd01d1626a1e23e37211e3254c1c06c

.github/workflows/lint.yml (4)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/setup-go v6@4a3601121dd01d1626a1e23e37211e3254c1c06c
• actions/cache v5@27d5ce7f107fe9357f9df03efb73ab90386fccae
• golangci/golangci-lint-action v9.2.0@1e7e51e771db61008b38414a730f564565cf7c20 → [Updates: v9.2.1]

.github/workflows/operator-ci.yml (22)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/setup-go v6@4a3601121dd01d1626a1e23e37211e3254c1c06c
• arduino/setup-task v2
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/setup-go v6@4a3601121dd01d1626a1e23e37211e3254c1c06c
• arduino/setup-task v2
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/setup-go v6@4a3601121dd01d1626a1e23e37211e3254c1c06c
• arduino/setup-task v2
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/setup-go v6@4a3601121dd01d1626a1e23e37211e3254c1c06c
• arduino/setup-task v2
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/setup-go v6@4a3601121dd01d1626a1e23e37211e3254c1c06c
• arduino/setup-task v2
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• azure/setup-helm v4.3.1@1a275c3b69536ee54be43f2070a358922e12c8d4 → [Updates: v5.0.0]
• ko-build/setup-ko v0.9@d006021bd0c28d1ce33a07e7943d48b079944c8d
• actions/setup-go v6@4a3601121dd01d1626a1e23e37211e3254c1c06c
• arduino/setup-task v2
• kyverno/action-install-chainsaw v0.2.15@1223ef75bedeb59c4e7b5455463d4316e76dff01
• helm/kind-action pin@v1.12.0@ef37e7f390d99f746eb8b610417061a60e82a6cc

.github/workflows/pr-size-label-apply.yml (8)

• actions/download-artifact v7@37930b1c2abaa49bbe596cd826c3c89aef350131 → [Updates: v8]
• actions/github-script v8@ed597411d8f924073f98dfc5c65a23a2325f34cd → [Updates: v9]
• actions/github-script v8@ed597411d8f924073f98dfc5c65a23a2325f34cd → [Updates: v9]
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/download-artifact v7@37930b1c2abaa49bbe596cd826c3c89aef350131 → [Updates: v8]
• actions/github-script v8@ed597411d8f924073f98dfc5c65a23a2325f34cd → [Updates: v9]
• actions/github-script v8@ed597411d8f924073f98dfc5c65a23a2325f34cd → [Updates: v9]
• actions/github-script v8@ed597411d8f924073f98dfc5c65a23a2325f34cd → [Updates: v9]

.github/workflows/pr-size-labeler.yml (3)

• actions/github-script v8@ed597411d8f924073f98dfc5c65a23a2325f34cd → [Updates: v9]
• actions/github-script v8@ed597411d8f924073f98dfc5c65a23a2325f34cd → [Updates: v9]
• actions/upload-artifact v6@b7c566a772e6b6bfb58ed0dc250532a479d7789f → [Updates: v7]

.github/workflows/releaser.yml (8)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/setup-go v6@4a3601121dd01d1626a1e23e37211e3254c1c06c
• anchore/sbom-action v0.24.0@e22c389904149dbc22b58101806040fa8d37a610
• sigstore/cosign-installer v4.1.1@cad07c2e89fa2edd6e2d7bab4c1aa38e53f76003 → [Updates: v4.1.2]
• goreleaser/goreleaser-action v7@1a80836c5c9d9e5755a25cb59ec6f45a3b5f41a8 → [Updates: v7]
• slackapi/slack-github-action v2.1.1@91efab103c0de0a537f72a35f6b8cda0ee76bf0a → [Updates: v3.0.3]

.github/workflows/renovate-config-validation.yml (1)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd

.github/workflows/security-scan.yml (5)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• anchore/scan-action v7.4.0@e1165082ffb1fe366ebaf02d8526e7c4989ea9d2
• github/codeql-action v4@9e0d7b8d25671d64c341c19c0152d693099fb5ba → [Updates: v4]
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• golang/govulncheck-action v1@b625fbe08f3bccbe446d94fbf87fcc875a4f50ee

.github/workflows/skills-build-and-publish.yml (3)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/setup-go v6@4a3601121dd01d1626a1e23e37211e3254c1c06c
• docker/login-action v3.7.0@c94ce9fb468520275223c153574b00df6fe4bcc9 → [Updates: v4.2.0]

.github/workflows/spellcheck.yml (2)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• codespell-project/actions-codespell v2@406322ec52dd7b488e48c1c4b82e2a8b3a1bf630

.github/workflows/test-e2e-lifecycle.yml (6)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• azure/setup-helm v4.3.1@1a275c3b69536ee54be43f2070a358922e12c8d4 → [Updates: v5.0.0]
• ko-build/setup-ko v0.9@d006021bd0c28d1ce33a07e7943d48b079944c8d
• actions/setup-go v6@4a3601121dd01d1626a1e23e37211e3254c1c06c
• arduino/setup-task v2
• helm/kind-action pin@v1.12.0@ef37e7f390d99f746eb8b610417061a60e82a6cc

.github/workflows/test.yml (7)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/setup-go v6@4a3601121dd01d1626a1e23e37211e3254c1c06c
• actions/cache v5@27d5ce7f107fe9357f9df03efb73ab90386fccae
• actions/cache v5@27d5ce7f107fe9357f9df03efb73ab90386fccae
• arduino/setup-task v2
• codecov/codecov-action v5@75cd11691c0faa626561e295848008c8a7dddffe → [Updates: v6]
• coverallsapp/github-action v2@5cbfd81b66ca5d10c19b062c04de0199c215fb6e

.github/workflows/verify-docgen.yml (2)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/setup-go v6@4a3601121dd01d1626a1e23e37211e3254c1c06c

.github/workflows/verify-gen.yml (4)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/setup-go v6@4a3601121dd01d1626a1e23e37211e3254c1c06c
• actions/cache v5@27d5ce7f107fe9357f9df03efb73ab90386fccae
• arduino/setup-task v2

gomod (1)

go.mod (98)

• go 1.26
• dario.cat/mergo v1.0.2
• github.com/1password/onepassword-sdk-go v0.3.1 → [Updates: v0.4.0]
• github.com/alicebob/miniredis/v2 v2.38.0
• github.com/atotto/clipboard v0.1.4
• github.com/aws/aws-sdk-go-v2 v1.41.7
• github.com/aws/aws-sdk-go-v2/config v1.32.17 → [Updates: v1.32.18]
• github.com/aws/aws-sdk-go-v2/service/sts v1.42.1
• github.com/cedar-policy/cedar-go v1.6.1 → [Updates: v1.6.2]
• github.com/cenkalti/backoff/v5 v5.0.3
• github.com/charmbracelet/bubbles v1.0.0 → [Updates: v2.1.0]
• github.com/charmbracelet/bubbletea v1.3.10 → [Updates: v2.0.6]
• github.com/charmbracelet/lipgloss v1.1.0 → [Updates: v2.0.3]
• github.com/charmbracelet/x/ansi v0.11.7
• github.com/containerd/errdefs v1.0.0
• github.com/coreos/go-oidc/v3 v3.18.0
• github.com/docker/docker v28.5.2+incompatible
• github.com/docker/go-connections v0.7.0
• github.com/evanphx/json-patch/v5 v5.9.11
• github.com/go-chi/chi/v5 v5.2.5 → [Updates: v5.3.0]
• github.com/go-git/go-billy/v5 v5.9.0
• github.com/go-git/go-git/v5 v5.19.1
• github.com/go-jose/go-jose/v3 v3.0.5 → [Updates: v4.1.4]
• github.com/go-jose/go-jose/v4 v4.1.4
• github.com/gofrs/flock v0.13.0
• github.com/google/cel-go v0.28.1
• github.com/google/go-cmp v0.7.0
• github.com/google/go-containerregistry v0.21.5 → [Updates: v0.21.6]
• github.com/google/uuid v1.6.0
• github.com/lestrrat-go/httprc/v3 v3.0.5
• github.com/lestrrat-go/jwx/v3 v3.0.13 → [Updates: v3.1.1, v4.0.2]
• github.com/mark3labs/mcp-go v0.54.0 → [Updates: v0.54.1]
• github.com/moby/moby/client v0.4.1
• github.com/modelcontextprotocol/registry v1.7.9
• github.com/oauth2-proxy/mockoidc v0.0.0-20240214162133-caebfff84d25@caebfff84d25
• github.com/olekukonko/tablewriter v1.1.4
• github.com/onsi/ginkgo/v2 v2.28.1 → [Updates: v2.29.0]
• github.com/onsi/gomega v1.39.1 → [Updates: v1.41.0]
• github.com/ory/fosite v0.49.0
• github.com/pelletier/go-toml/v2 v2.3.1
• github.com/pkg/browser v0.0.0-20240102092130-5ac0b6a4141c@5ac0b6a4141c
• github.com/pressly/goose/v3 v3.27.0 → [Updates: v3.27.1]
• github.com/prometheus/client_golang v1.23.2
• github.com/redis/go-redis/v9 v9.19.0
• github.com/shirou/gopsutil/v4 v4.26.3 → [Updates: v4.26.4]
• github.com/spf13/viper v1.21.0
• github.com/stacklok/toolhive-catalog v0.20260518.0 → [Updates: v0.20260520.0]
• github.com/stacklok/toolhive-core v0.0.21 → [Updates: v0.0.22]
• github.com/stretchr/testify v1.11.1
• github.com/swaggo/swag/v2 v2.0.0-rc5
• github.com/tailscale/hujson v0.0.0-20260302212456-ecc657c15afd@ecc657c15afd
• github.com/testcontainers/testcontainers-go v0.40.0 → [Updates: v0.42.0]
• github.com/tidwall/gjson v1.18.0 → [Updates: v1.19.0]
• github.com/xeipuuv/gojsonschema v1.2.0
• github.com/zalando/go-keyring v0.2.8
• go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp v1.43.0
• go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.43.0
• go.opentelemetry.io/otel/exporters/prometheus v0.65.0
• go.opentelemetry.io/otel/sdk v1.43.0
• go.opentelemetry.io/otel/sdk/metric v1.43.0
• go.uber.org/mock v0.6.0
• go.uber.org/zap v1.27.1 → [Updates: v1.28.0]
• golang.ngrok.com/ngrok/v2 v2.1.4
• golang.org/x/exp/jsonrpc2 v0.0.0-20260508232706-74f9aab9d74a@74f9aab9d74a
• golang.org/x/mod v0.36.0
• golang.org/x/oauth2 v0.36.0
• golang.org/x/sync v0.20.0
• golang.org/x/term v0.43.0
• golang.org/x/time v0.15.0
• gopkg.in/yaml.v3 v3.0.1
• k8s.io/api v0.35.3 → [Updates: v0.36.1]
• k8s.io/apimachinery v0.35.3 → [Updates: v0.36.1]
• k8s.io/utils v0.0.0-20260319190234-28399d86e0b5@28399d86e0b5 → [Updates: v0.0.0-20260507154919-ff6756f316d2]
• modernc.org/sqlite v1.48.0 → [Updates: v1.50.1]
• sigs.k8s.io/controller-runtime v0.23.3 → [Updates: v0.24.1]
• sigs.k8s.io/yaml v1.6.0
• github.com/getsentry/sentry-go/otel v0.44.1 → [Updates: v0.46.2]
• github.com/hashicorp/golang-lru/v2 v2.0.7
• go.starlark.net v0.0.0-20260326113308-fadfc96def35@fadfc96def35 → [Updates: v0.0.0-20260522144826-ec58d4b459e2]
• github.com/getsentry/sentry-go v0.44.1 → [Updates: v0.46.2]
• github.com/muesli/termenv v0.16.0
• k8s.io/apiextensions-apiserver v0.35.0 → [Updates: v0.36.1]
• oras.land/oras-go/v2 v2.6.0
• github.com/Microsoft/go-winio v0.6.2
• github.com/adrg/xdg v0.5.3
• github.com/go-logr/logr v1.4.3
• github.com/golang-jwt/jwt/v5 v5.3.1
• github.com/opencontainers/go-digest v1.0.0
• github.com/opencontainers/image-spec v1.1.1
• github.com/spf13/cobra v1.10.2
• github.com/spf13/pflag v1.0.10
• go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.67.0 → [Updates: v0.68.0]
• go.opentelemetry.io/otel v1.43.0
• go.opentelemetry.io/otel/metric v1.43.0
• go.opentelemetry.io/otel/trace v1.43.0
• golang.org/x/crypto v0.52.0
• golang.org/x/sys v0.45.0
• k8s.io/client-go v0.35.3 → [Updates: v0.36.1]

helm-values (1)

deploy/charts/operator/values.yaml (4)

• ghcr.io/stacklok/toolhive/operator v0.28.3
• ghcr.io/stacklok/toolhive/proxyrunner v0.28.3
• ghcr.io/stacklok/toolhive/vmcp v0.28.3
• ghcr.io/stacklok/thv-registry-api v1.3.0 → [Updates: v1.4.5]

regex (8)

.github/workflows/helm-charts-test.yml (1)

• helm/helm 3.20.2 → [Updates: 3.21.0, 4.2.0]

.github/workflows/operator-ci.yml (3)

• kindest/node 1.33.7 → [Updates: 1.35.1]
• kindest/node 1.34.3 → [Updates: 1.35.1]
• kindest/node 1.35.1

.github/workflows/operator-ci.yml (1)

• kubernetes-sigs/kind 0.31.0

.github/workflows/operator-ci.yml (1)

• kyverno/chainsaw 0.2.15

.github/workflows/test-e2e-lifecycle.yml (3)

• kindest/node 1.33.7 → [Updates: 1.35.1]
• kindest/node 1.34.3 → [Updates: 1.35.1]
• kindest/node 1.35.1

.github/workflows/test-e2e-lifecycle.yml (1)

• kubernetes-sigs/kind 0.31.0

cmd/thv/app/inspector/version.go (1)

• ghcr.io/modelcontextprotocol/inspector 0.21.2

pkg/container/templates/go.tmpl (1)

• index.docker.io/library/alpine 3.23@sha256:5b10f432ef3da1b8d4c7eb6c487f2f5a8f096bc91145e68878dd4a5019afde11

---

• Check this box to trigger a request for Renovate to run again on this repository