Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Config Migration Needed

• Select this checkbox to let Renovate create an automated Config Migration PR.

Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

• chore(deps): update gcr.io/distroless/static:latest docker digest to 5813399
• chore(deps-dev): update helm/kind-action action to v1.15.1
• chore(deps): update module github.com/vektah/gqlparser/v2 to v2.5.61
• chore(deps-dev): update step-security/harden-runner action to v2.22.0
• chore(deps): update dependency sigs.k8s.io/controller-runtime/tools/setup-envtest to release-0.25
• chore(deps): update ghcr.io/doodlescheduling/apollo-controller docker tag to v0.3.0
• chore(deps): update quay.io/brancz/kube-rbac-proxy docker tag to v0.23.0

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): update kubernetes monorepo to v0.37.1 (k8s.io/api, k8s.io/apimachinery, k8s.io/client-go)
• chore(deps): update module github.com/fluxcd/pkg/runtime to v0.115.0
• chore(deps): update module sigs.k8s.io/controller-runtime to v0.25.2
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

dockerfile (1)

Dockerfile (1)

• gcr.io/distroless/static latest@sha256:9197324ba51d9cd071af8505989365c006adf9d6d2067eada25aef00abbb5278 → [Updates: latest]

github-actions (11)

.github/workflows/main.yaml (5)

• step-security/harden-runner v2.21.1@e14015d583714f6e62063499dc959a02595150a1 → [Updates: v2.22.0]
• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/setup-go v7.0.0@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e
• shogo82148/actions-goveralls v1.11.3@daabb2902148216a0b13c82107a6e67ed97f796e
• go 1.27.x

.github/workflows/pr-build.yaml (35)

• step-security/harden-runner v2.21.1@e14015d583714f6e62063499dc959a02595150a1 → [Updates: v2.22.0]
• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• azure/setup-helm v5.0.1@9bc31f4ebc9c6b171d7bfbaa5d006ae7abdb4310
• actions/setup-python v7.0.0@5fda3b95a4ea91299a34e894583c3862153e4b97
• helm/chart-testing-action v2.8.0@6ec842c01de15ebb84c8627d2744a0c2f2755c9f
• step-security/harden-runner v2.21.1@e14015d583714f6e62063499dc959a02595150a1 → [Updates: v2.22.0]
• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/setup-go v7.0.0@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e
• step-security/harden-runner v2.21.1@e14015d583714f6e62063499dc959a02595150a1 → [Updates: v2.22.0]
• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/setup-go v7.0.0@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e
• step-security/harden-runner v2.21.1@e14015d583714f6e62063499dc959a02595150a1 → [Updates: v2.22.0]
• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/setup-go v7.0.0@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• step-security/harden-runner v2.21.1@e14015d583714f6e62063499dc959a02595150a1 → [Updates: v2.22.0]
• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/setup-go v7.0.0@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e
• engineerd/setup-kind v0.5.0@aa272fe2a7309878ffc2a81c56cfe3ef108ae7d0
• actions/download-artifact v8.0.1@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• imranismail/setup-kustomize v3.0.0@53f941b41dca13ed61874bbc6b4b6e1562877530
• step-security/harden-runner v2.21.1@e14015d583714f6e62063499dc959a02595150a1 → [Updates: v2.22.0]
• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• azure/setup-helm v5.0.1@9bc31f4ebc9c6b171d7bfbaa5d006ae7abdb4310
• actions/setup-python v7.0.0@5fda3b95a4ea91299a34e894583c3862153e4b97
• helm/chart-testing-action v2.8.0@6ec842c01de15ebb84c8627d2744a0c2f2755c9f
• helm/kind-action v1.15.0@06c1ae10762d3b9c1644e7fe69596ae519e015a2 → [Updates: v1.15.1]
• actions/download-artifact v8.0.1@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• helm v4.3.0
• python 3.14
• go 1.27.x
• go 1.27.x
• go 1.27.x
• go 1.27.x
• python 3.14

.github/workflows/pr-goreleaser.yaml (3)

• step-security/harden-runner v2.21.1@e14015d583714f6e62063499dc959a02595150a1 → [Updates: v2.22.0]
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• goreleaser/goreleaser-action v7.2.3@f06c13b6b1a9625abc9e6e439d9c05a8f2190e94

.github/workflows/pr-label.yaml (1)

• step-security/harden-runner v2.21.1@e14015d583714f6e62063499dc959a02595150a1 → [Updates: v2.22.0]

.github/workflows/pr-stale.yaml (1)

• actions/stale v11.0.0@4391f3da665fdf50b6810c1a66712fb9ba21aa93

.github/workflows/pr-trivy.yaml (3)

• step-security/harden-runner v2.21.1@e14015d583714f6e62063499dc959a02595150a1 → [Updates: v2.22.0]
• aquasecurity/trivy-action v0.36.0@ed142fd0673e97e23eac54620cfb913e5ce36c25
• github/codeql-action v4.38.2@2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2

.github/workflows/rebase.yaml (3)

• step-security/harden-runner v2.21.1@e14015d583714f6e62063499dc959a02595150a1 → [Updates: v2.22.0]
• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• cirrus-actions/rebase 1.8@b87d48154a87a85666003575337e27b8cd65f691

.github/workflows/release.yaml (12)

• step-security/harden-runner v2.21.1@e14015d583714f6e62063499dc959a02595150a1 → [Updates: v2.22.0]
• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/setup-go v7.0.0@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e
• docker/login-action v4.6.0@dbcb813823bdd20940b903addbd779551569679f
• sigstore/cosign-installer v4.1.2@6f9f17788090df1f26f669e9d70d6ae9567deba6
• anchore/sbom-action v0.24.3@66cbf4bc1f1c0d2edc94016e65bc221b6bb0ad6c
• goreleaser/goreleaser-action v7.2.3@f06c13b6b1a9625abc9e6e439d9c05a8f2190e94
• step-security/harden-runner v2.21.1@e14015d583714f6e62063499dc959a02595150a1 → [Updates: v2.22.0]
• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• azure/setup-helm v5.0.1@9bc31f4ebc9c6b171d7bfbaa5d006ae7abdb4310
• sigstore/cosign-installer v4.1.2@6f9f17788090df1f26f669e9d70d6ae9567deba6
• go 1.27.x

.github/workflows/report-on-vulnerabilities.yaml (7)

• step-security/harden-runner v2.21.1@e14015d583714f6e62063499dc959a02595150a1 → [Updates: v2.22.0]
• aquasecurity/trivy-action v0.36.0@ed142fd0673e97e23eac54620cfb913e5ce36c25
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• step-security/harden-runner v2.21.1@e14015d583714f6e62063499dc959a02595150a1 → [Updates: v2.22.0]
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/download-artifact v8.0.1@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• JasonEtco/create-an-issue v2.9.2@1b14a70e4d8dc185e5cc76d3bec9eab20257b2c5

.github/workflows/scan.yaml (5)

• step-security/harden-runner v2.21.1@e14015d583714f6e62063499dc959a02595150a1 → [Updates: v2.22.0]
• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• github/codeql-action codeql-bundle-20221020@f0a12816612c7306b485a22cb164feb43c6df818
• github/codeql-action codeql-bundle-20221020@f0a12816612c7306b485a22cb164feb43c6df818
• github/codeql-action codeql-bundle-20221020@f0a12816612c7306b485a22cb164feb43c6df818

.github/workflows/scorecard.yaml (5)

• step-security/harden-runner v2.21.1@e14015d583714f6e62063499dc959a02595150a1 → [Updates: v2.22.0]
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• ossf/scorecard-action v2.4.4@2d1146689b8cda280b9bc96326124645441f03bc
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• github/codeql-action v4.38.2@2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2

gomod (1)

go.mod (14)

• go 1.26.0
• github.com/fluxcd/pkg/runtime v0.112.0 → [Updates: v0.115.0]
• github.com/go-logr/logr v1.4.4
• github.com/goccy/go-yaml v1.19.2
• github.com/kylelemons/godebug v1.1.0
• github.com/onsi/ginkgo/v2 v2.33.0
• github.com/onsi/gomega v1.44.0
• github.com/spf13/pflag v1.0.10
• github.com/stretchr/testify v1.12.1
• github.com/vektah/gqlparser/v2 v2.5.60 → [Updates: v2.5.61]
• k8s.io/api v0.36.3 → [Updates: v0.37.1]
• k8s.io/apimachinery v0.36.3 → [Updates: v0.37.1]
• k8s.io/client-go v0.36.3 → [Updates: v0.37.1]
• sigs.k8s.io/controller-runtime v0.24.1 → [Updates: v0.25.2]

helm-values (1)

chart/apollo-controller/values.yaml (1)

• quay.io/brancz/kube-rbac-proxy v0.19.0 → [Updates: v0.23.0]

kustomize (1)

config/base/manager/kustomization.yaml (1)

• ghcr.io/doodlescheduling/apollo-controller v0.0.3 → [Updates: v0.3.0]

regex (2)

Makefile (4)

• github.com/ahmetb/gen-crd-api-reference-docs v0.3.0
• sigs.k8s.io/controller-tools/cmd/controller-gen v0.22.0
• github.com/golangci/golangci-lint/v2/cmd/golangci-lint v2.14.0
• sigs.k8s.io/kustomize/kustomize/v4 v5.8.2

Makefile (1)

• sigs.k8s.io/controller-runtime/tools/setup-envtest release-0.24 → [Updates: release-0.25]

renovate-config (1)

renovate.json

---

• Check this box to trigger a request for Renovate to run again on this repository