Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Config Migration Needed

• Select this checkbox to let Renovate create an automated Config Migration PR.

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• Update gcr.io/distroless/static Docker digest to 47b2d72
• Update xpkg.upbound.io/upbound/crossplane Docker tag to v1.20.5
• Update kubernetes monorepo to v0.35.3 (k8s.io/api, k8s.io/apimachinery, k8s.io/client-go)
• Update module sigs.k8s.io/controller-runtime to v0.23.3
• Update actions/cache action to v5
• Update actions/checkout action to v6
• Update actions/github-script action to v8
• Update actions/setup-go action to v6
• Update actions/upload-artifact action to v7
• Update aws-actions/configure-aws-credentials action to v6
• Update codecov/codecov-action action to v6
• Update crazy-max/ghaction-github-labeler action to v6
• Update dependency golangci/golangci-lint to v2
• Update dependency ubuntu to v24
• Update docker/login-action action to v4
• Update docker/setup-buildx-action action to v4
• Update docker/setup-qemu-action action to v4
• Update fkirc/skip-duplicate-actions action to v5
• Update golangci/golangci-lint-action action to v9
• Update xpkg.upbound.io/upbound/crossplane Docker tag to v2
• Update xt0rted/slash-command-action action to v2
• Update zeebe-io/backport-action action to v4
• 🔐 Create all rate-limited PRs at once 🔐

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• Update module golang.org/x/net to v0.38.0 [SECURITY]
• Pin dependencies (actions/cache, actions/checkout, actions/github-script, actions/setup-go, aws-actions/configure-aws-credentials, codecov/codecov-action, crazy-max/ghaction-github-labeler, docker/login-action, docker/setup-buildx-action, docker/setup-qemu-action, golangci/golangci-lint-action, imjasonh/setup-crane, negz/create-tag, xt0rted/slash-command-action)
• Update actions/upload-artifact digest to ea165f8
• Update docker/login-action digest to c94ce9f
• Update dependency golang to v1.26.1
• Update imjasonh/setup-crane action to v0.5
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

dockerfile (1)

cluster/images/uxp-bootstrapper/Dockerfile (1)

• gcr.io/distroless/static sha256:d2b0ec3141031720cf5eedef3493b8e129bc91935a43b50562fbe5429878d96b → [Updates: undefined]

github-actions (7)

.github/workflows/backport.yml (3)

• actions/checkout v2 → [Updates: v6, v2]
• zeebe-io/backport-action v0.0.9@2ee900dc92632adf994f8e437b6d16840fd61f58 → [Updates: v4.3.0]
• ubuntu 24.04

.github/workflows/ci.yml (33)

• fkirc/skip-duplicate-actions v2.2.0@0c0fd7dfd27f1de7871e98791077b9ae5f1d8757 → [Updates: v5.3.1]
• actions/checkout v2 → [Updates: v6, v2]
• actions/setup-go v2 → [Updates: v6, v2]
• actions/cache v4 → [Updates: v5, v4]
• actions/cache v4 → [Updates: v5, v4]
• golangci/golangci-lint-action v3 → [Updates: v9, v3]
• actions/checkout v2 → [Updates: v6, v2]
• actions/setup-go v2 → [Updates: v6, v2]
• actions/cache v4 → [Updates: v5, v4]
• actions/cache v4 → [Updates: v5, v4]
• actions/checkout v2 → [Updates: v6, v2]
• actions/setup-go v2 → [Updates: v6, v2]
• actions/cache v4 → [Updates: v5, v4]
• actions/cache v4 → [Updates: v5, v4]
• codecov/codecov-action v1 → [Updates: v6, v1]
• docker/setup-qemu-action v1 → [Updates: v4, v1]
• docker/setup-buildx-action v1 → [Updates: v4, v1]
• actions/checkout v2 → [Updates: v6, v2]
• actions/setup-go v2 → [Updates: v6, v2]
• actions/cache v4 → [Updates: v5, v4]
• actions/cache v4 → [Updates: v5, v4]
• actions/upload-artifact v4@50769540e7f4bd5e21e526ee35c689e35e0d6874 → [Updates: v7, v4]
• docker/login-action v1 → [Updates: v4, v1]
• aws-actions/configure-aws-credentials v4 → [Updates: v6, v4]
• actions/checkout v2 → [Updates: v6, v2]
• imjasonh/setup-crane v0.4 → [Updates: v0.5, v0.4]
• docker/login-action v3@343f7c4344506bcbf9b4de18042ae17996df046d → [Updates: v4, v3]
• ubuntu 22.04 → [Updates: 24.04]
• ubuntu 22.04 → [Updates: 24.04]
• ubuntu 22.04 → [Updates: 24.04]
• ubuntu 22.04 → [Updates: 24.04]
• ubuntu 22.04 → [Updates: 24.04]
• ubuntu 22.04 → [Updates: 24.04]

.github/workflows/commands.yml (7)

• xt0rted/slash-command-action v1 → [Updates: v2, v1]
• actions/github-script v4 → [Updates: v8, v4]
• xt0rted/slash-command-action v1 → [Updates: v2, v1]
• actions/checkout v2 → [Updates: v6, v2]
• zeebe-io/backport-action v0.0.9@2ee900dc92632adf994f8e437b6d16840fd61f58 → [Updates: v4.3.0]
• ubuntu 22.04 → [Updates: 24.04]
• ubuntu 22.04 → [Updates: 24.04]

.github/workflows/labels.yml (3)

• actions/checkout v2 → [Updates: v6, v2]
• crazy-max/ghaction-github-labeler v3 → [Updates: v6, v3]
• ubuntu 22.04 → [Updates: 24.04]

.github/workflows/promote.yml (5)

• actions/checkout v2 → [Updates: v6, v2]
• docker/login-action v3@343f7c4344506bcbf9b4de18042ae17996df046d → [Updates: v4, v3]
• docker/login-action v3@343f7c4344506bcbf9b4de18042ae17996df046d → [Updates: v4, v3]
• aws-actions/configure-aws-credentials v4 → [Updates: v6, v4]
• ubuntu 22.04 → [Updates: 24.04]

.github/workflows/pushvalidation.yml (8)

• fkirc/skip-duplicate-actions v2.2.0@0c0fd7dfd27f1de7871e98791077b9ae5f1d8757 → [Updates: v5.3.1]
• actions/checkout v2 → [Updates: v6, v2]
• actions/setup-go v2 → [Updates: v6, v2]
• actions/cache v4 → [Updates: v5, v4]
• actions/cache v4 → [Updates: v5, v4]
• docker/login-action v1 → [Updates: v4, v1]
• ubuntu 22.04 → [Updates: 24.04]
• ubuntu 22.04 → [Updates: 24.04]

.github/workflows/tag.yml (3)

• actions/checkout v2 → [Updates: v6, v2]
• negz/create-tag v1 → [Updates: v1]
• ubuntu 22.04 → [Updates: 24.04]

gomod (1)

go.mod (15)

• go 1.19
• github.com/alecthomas/kong v0.2.16 → [Updates: v0.9.0, v1.15.0]
• github.com/aws/aws-sdk-go-v2 v1.3.1 → [Updates: v1.41.5]
• github.com/aws/aws-sdk-go-v2/config v1.1.4 → [Updates: v1.32.13]
• github.com/aws/aws-sdk-go-v2/service/marketplacemetering v1.2.1 → [Updates: v1.36.3]
• github.com/crossplane/crossplane-runtime v0.19.2 → [Updates: v0.20.1, v2.2.0]
• github.com/golang-jwt/jwt v3.2.2+incompatible
• github.com/golang/mock v1.5.0 → [Updates: v1.6.0]
• github.com/google/addlicense v0.0.0-20210428195630-6d92264d7170@6d92264d7170 → [Updates: v1.2.0]
• github.com/google/go-cmp v0.5.9 → [Updates: v0.7.0]
• k8s.io/api v0.26.1 → [Updates: v0.35.3]
• k8s.io/apimachinery v0.26.1 → [Updates: v0.35.3]
• k8s.io/client-go v0.26.1 → [Updates: v0.35.3]
• sigs.k8s.io/controller-runtime v0.14.1 → [Updates: v0.23.3]
• golang.org/x/net v0.24.0 → [Updates: v0.38.0]

helm-values (1)

cluster/charts/universal-crossplane/values.yaml (1)

• xpkg.upbound.io/upbound/crossplane v1.20.4-up.1 → [Updates: v1.20.5-up.1, v2.2.0-up.1]

regex (5)

.github/workflows/ci.yml (1)

• golang 1.24.3 → [Updates: 1.26.1]

.github/workflows/ci.yml (1)

• golangci/golangci-lint 1.64.8 → [Updates: 2.11.4]

.github/workflows/pushvalidation.yml

.github/workflows/pushvalidation.yml (1)

• golangci/golangci-lint 1.64.8 → [Updates: 2.11.4]

Makefile (1)

• golangci/golangci-lint 1.64.8 → [Updates: 2.11.4]

---

• Check this box to trigger a request for Renovate to run again on this repository