Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• Update module github.com/Masterminds/semver/v3 to v3.5.0
• Update module github.com/onsi/ginkgo/v2 to v2.32.0
• Update module github.com/onsi/gomega to v1.42.1
• Update module github.com/prometheus/common to v0.69.0
• Update module github.com/prometheus/procfs to v0.21.1
• Update module go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp to v0.69.0
• Update module go.opentelemetry.io/proto/otlp to v1.10.0
• Update module go.uber.org/zap to v1.28.0
• Update module golang.org/x/mod to v0.38.0
• Update module golang.org/x/net to v0.57.0
• Update module golang.org/x/oauth2 to v0.36.0
• Update module golang.org/x/sync to v0.22.0
• Update module golang.org/x/sys to v0.47.0
• Update module golang.org/x/term to v0.45.0
• Update module golang.org/x/text to v0.40.0
• Update module golang.org/x/time to v0.15.0
• Update module golang.org/x/tools to v0.47.0
• Update module gomodules.xyz/jsonpatch/v2 to v2.5.0
• Update module google.golang.org/grpc to v1.82.0
• Update module sigs.k8s.io/apiserver-network-proxy/konnectivity-client to v0.36.0
• Update opentelemetry-go monorepo to v1.44.0 (go.opentelemetry.io/otel, go.opentelemetry.io/otel/exporters/otlp/otlptrace, go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc, go.opentelemetry.io/otel/metric, go.opentelemetry.io/otel/sdk, go.opentelemetry.io/otel/trace)
• Update actions/checkout action to v7
• Update go-openapi packages to v1 (github.com/go-openapi/jsonpointer, github.com/go-openapi/jsonreference)
• Update module github.com/cenkalti/backoff/v5 to v7
• Update module go.yaml.in/yaml/v2 to v3
• Update module gomodules.xyz/jsonpatch/v2 to v3
• Update module gopkg.in/evanphx/json-patch.v4 to v5
• 🔐 Create all rate-limited PRs at once 🔐

PR Edited (Blocked)

The following updates have been manually edited so Renovate will no longer make changes. To discard all commits and start over, click on a checkbox below.

• Update module github.com/stoewer/go-strcase to v1.3.1

Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

• Update github.com/google/pprof digest to b9395ee
• Update golang.org/x/exp digest to 9ea1abe
• Update ghcr.io/devcontainers/features/docker-in-docker Docker tag to v4

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• Update module github.com/google/gnostic-models to v0.7.1
• Update module go.yaml.in/yaml/v2 to v2.4.4
• Update module sigs.k8s.io/structured-merge-diff/v6 to v6.4.2
• Update docker/dockerfile Docker tag to v1.25
• Update go-openapi packages (github.com/go-openapi/jsonpointer, github.com/go-openapi/jsonreference, github.com/go-openapi/swag, github.com/go-openapi/swag/cmdutils, github.com/go-openapi/swag/conv, github.com/go-openapi/swag/fileutils, github.com/go-openapi/swag/jsonname, github.com/go-openapi/swag/jsonutils, github.com/go-openapi/swag/loading, github.com/go-openapi/swag/mangling, github.com/go-openapi/swag/netutils, github.com/go-openapi/swag/stringutils, github.com/go-openapi/swag/typeutils, github.com/go-openapi/swag/yamlutils)
• Update module github.com/felixge/httpsnoop to v1.1.0
• Update module github.com/fsnotify/fsnotify to v1.10.1
• Update module github.com/google/cel-go to v0.29.2
• Update module github.com/grpc-ecosystem/grpc-gateway/v2 to v2.29.0
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

devcontainer (1)

.devcontainer/devcontainer.json (3)

• docker.io/golang 1.26
• ghcr.io/devcontainers/features/docker-in-docker 2 → [Updates: 4]
• ghcr.io/devcontainers/features/git 1

dockerfile (1)

Dockerfile (2)

• docker/dockerfile 1.24 → [Updates: 1.25]
• docker.io/golang 1.26

github-actions (4)

.github/workflows/ci.yml (21)

• actions/checkout v6 → [Updates: v7]
• actions/setup-go v6
• golangci/golangci-lint-action v9
• actions/checkout v6 → [Updates: v7]
• actions/setup-go v6
• actions/checkout v6 → [Updates: v7]
• actions/setup-go v6
• actions/checkout v6 → [Updates: v7]
• docker/setup-qemu-action v4
• docker/setup-buildx-action v4
• docker/build-push-action v7
• actions/checkout v6 → [Updates: v7]
• actions/setup-go v6
• azure/setup-helm v5
• actions/checkout v6 → [Updates: v7]
• actions/setup-go v6
• peaceiris/actions-hugo v3
• actions/checkout v6 → [Updates: v7]
• actions/setup-go v6
• golangci/golangci-lint v2.12.2
• go 1.26

.github/workflows/cut-release.yml (1)

• actions/checkout v6 → [Updates: v7]

.github/workflows/docs.yml (6)

• actions/checkout v6 → [Updates: v7]
• actions/setup-go v6
• peaceiris/actions-hugo v3
• actions/upload-pages-artifact v5
• actions/deploy-pages v5
• go 1.26

.github/workflows/release.yml (8)

• actions/checkout v6 → [Updates: v7]
• actions/setup-go v6
• docker/login-action v4
• docker/setup-buildx-action v4
• sigstore/cosign-installer v4.1.2
• docker/metadata-action v6
• docker/build-push-action v7
• actions/attest-build-provenance v4

gomod (2)

docs/go.mod (2)

• go 1.26.0
• github.com/imfing/hextra v0.12.3

go.mod (102)

• go 1.26.0
• github.com/Masterminds/semver/v3 v3.4.0 → [Updates: v3.5.0]
• github.com/onsi/ginkgo/v2 v2.29.0 → [Updates: v2.32.0]
• github.com/onsi/gomega v1.41.0 → [Updates: v1.42.1]
• github.com/prometheus/client_golang v1.23.2
• gopkg.in/yaml.v3 v3.0.1
• k8s.io/api v0.36.2
• k8s.io/apimachinery v0.36.2
• k8s.io/client-go v0.36.2
• k8s.io/component-helpers v0.36.2
• k8s.io/utils v0.0.0-20260707023825-cf1189d6abe3@cf1189d6abe3
• sigs.k8s.io/controller-runtime v0.24.1
• cel.dev/expr v0.25.2
• github.com/antlr4-go/antlr/v4 v4.13.1
• github.com/beorn7/perks v1.0.1
• github.com/blang/semver/v4 v4.0.0
• github.com/cenkalti/backoff/v5 v5.0.3 → [Updates: v7.0.0]
• github.com/cespare/xxhash/v2 v2.3.0
• github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc@d8f796af33cc
• github.com/emicklei/go-restful/v3 v3.13.0
• github.com/evanphx/json-patch/v5 v5.9.11
• github.com/felixge/httpsnoop v1.0.4 → [Updates: v1.1.0]
• github.com/fsnotify/fsnotify v1.9.0 → [Updates: v1.10.1]
• github.com/fxamacker/cbor/v2 v2.9.2
• github.com/go-logr/logr v1.4.3
• github.com/go-logr/stdr v1.2.2
• github.com/go-logr/zapr v1.3.0
• github.com/go-openapi/jsonpointer v0.21.0 → [Updates: v0.24.0, v1.0.0]
• github.com/go-openapi/jsonreference v0.20.2 → [Updates: v0.21.6, v1.0.0]
• github.com/go-openapi/swag v0.25.4 → [Updates: v0.27.0]
• github.com/go-openapi/swag/cmdutils v0.25.4 → [Updates: v0.27.0]
• github.com/go-openapi/swag/conv v0.25.4 → [Updates: v0.27.0]
• github.com/go-openapi/swag/fileutils v0.25.4 → [Updates: v0.27.0]
• github.com/go-openapi/swag/jsonname v0.25.4 → [Updates: v0.27.0]
• github.com/go-openapi/swag/jsonutils v0.25.4 → [Updates: v0.27.0]
• github.com/go-openapi/swag/loading v0.25.4 → [Updates: v0.27.0]
• github.com/go-openapi/swag/mangling v0.25.4 → [Updates: v0.27.0]
• github.com/go-openapi/swag/netutils v0.25.4 → [Updates: v0.27.0]
• github.com/go-openapi/swag/stringutils v0.25.4 → [Updates: v0.27.0]
• github.com/go-openapi/swag/typeutils v0.25.4 → [Updates: v0.27.0]
• github.com/go-openapi/swag/yamlutils v0.25.4 → [Updates: v0.27.0]
• github.com/go-task/slim-sprig/v3 v3.0.0
• github.com/google/cel-go v0.26.0 → [Updates: v0.29.2]
• github.com/google/gnostic-models v0.7.0 → [Updates: v0.7.1]
• github.com/google/go-cmp v0.7.0
• github.com/google/pprof v0.0.0-20260402051712-545e8a4df936@545e8a4df936 → [Updates: v0.0.0-20260709232956-b9395ee17fa0]
• github.com/google/uuid v1.6.0
• github.com/grpc-ecosystem/grpc-gateway/v2 v2.27.7 → [Updates: v2.29.0]
• github.com/inconshreveable/mousetrap v1.1.0
• github.com/json-iterator/go v1.1.12
• github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd@bacd9c7ef1dd
• github.com/modern-go/reflect2 v1.0.3-0.20250322232337-35a7c28c31ee@35a7c28c31ee
• github.com/munnerz/goautoneg v0.0.0-20191010083416-a7dc8b61c822@a7dc8b61c822
• github.com/pmezard/go-difflib v1.0.1-0.20181226105442-5d4384ee4fb2@5d4384ee4fb2
• github.com/prometheus/client_model v0.6.2
• github.com/prometheus/common v0.67.5 → [Updates: v0.69.0]
• github.com/prometheus/procfs v0.19.2 → [Updates: v0.21.1]
• github.com/spf13/cobra v1.10.2
• github.com/spf13/pflag v1.0.10
• github.com/stoewer/go-strcase v1.3.0 → [Updates: v1.3.1]
• github.com/x448/float16 v0.8.4
• go.opentelemetry.io/auto/sdk v1.2.1
• go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.65.0 → [Updates: v0.69.0]
• go.opentelemetry.io/otel v1.41.0 → [Updates: v1.44.0]
• go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.40.0 → [Updates: v1.44.0]
• go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.40.0 → [Updates: v1.44.0]
• go.opentelemetry.io/otel/metric v1.41.0 → [Updates: v1.44.0]
• go.opentelemetry.io/otel/sdk v1.40.0 → [Updates: v1.44.0]
• go.opentelemetry.io/otel/trace v1.41.0 → [Updates: v1.44.0]
• go.opentelemetry.io/proto/otlp v1.9.0 → [Updates: v1.10.0]
• go.uber.org/multierr v1.11.0
• go.uber.org/zap v1.27.1 → [Updates: v1.28.0]
• go.yaml.in/yaml/v2 v2.4.3 → [Updates: v2.4.4, v3.0.4]
• go.yaml.in/yaml/v3 v3.0.4
• golang.org/x/exp v0.0.0-20251219203646-944ab1f22d93@944ab1f22d93 → [Updates: v0.0.0-20260709172345-9ea1abe57597]
• golang.org/x/mod v0.35.0 → [Updates: v0.38.0]
• golang.org/x/net v0.55.0 → [Updates: v0.57.0]
• golang.org/x/oauth2 v0.34.0 → [Updates: v0.36.0]
• golang.org/x/sync v0.20.0 → [Updates: v0.22.0]
• golang.org/x/sys v0.45.0 → [Updates: v0.47.0]
• golang.org/x/term v0.43.0 → [Updates: v0.45.0]
• golang.org/x/text v0.37.0 → [Updates: v0.40.0]
• golang.org/x/time v0.14.0 → [Updates: v0.15.0]
• golang.org/x/tools v0.44.0 → [Updates: v0.47.0]
• gomodules.xyz/jsonpatch/v2 v2.4.0 → [Updates: v2.5.0, v3.0.1]
• google.golang.org/genproto/googleapis/api v0.0.0-20260706201446-f0a921348800@f0a921348800
• google.golang.org/genproto/googleapis/rpc v0.0.0-20260706201446-f0a921348800@f0a921348800
• google.golang.org/grpc v1.79.3 → [Updates: v1.82.0]
• google.golang.org/protobuf v1.36.12-0.20260120151049-f2248ac996af@f2248ac996af
• gopkg.in/evanphx/json-patch.v4 v4.13.0 → [Updates: v5.9.11]
• gopkg.in/inf.v0 v0.9.1
• k8s.io/apiextensions-apiserver v0.36.2
• k8s.io/apiserver v0.36.2
• k8s.io/component-base v0.36.2
• k8s.io/klog/v2 v2.140.0
• k8s.io/kube-openapi v0.0.0-20260706235625-cdb1db5517a0@cdb1db5517a0
• k8s.io/streaming v0.36.2
• sigs.k8s.io/apiserver-network-proxy/konnectivity-client v0.34.0 → [Updates: v0.36.0]
• sigs.k8s.io/json v0.0.0-20250730193827-2d320260d730@2d320260d730
• sigs.k8s.io/randfill v1.0.0
• sigs.k8s.io/structured-merge-diff/v6 v6.4.1 → [Updates: v6.4.2]
• sigs.k8s.io/yaml v1.6.0

helm-values (1)

charts/drop/values.yaml

pip_requirements (3)

docs/static/images/src/requirements.txt (3)

• pandas >=2.0
• matplotlib >=3.8
• seaborn >=0.13

research/benchmark/evaluator/requirements.txt (3)

• pandas >=2.2
• numpy >=1.26
• matplotlib >=3.8

research/benchmark/results/ci-image-cache-20runs/evaluator/requirements.txt (3)

• pandas >=2.2
• numpy >=1.26
• matplotlib >=3.8

---

• Check this box to trigger a request for Renovate to run again on this repository