Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

• chore(deps): update quay.io/brancz/kube-rbac-proxy docker tag to v0.21.2
• chore(deps): update aquasecurity/trivy-action action to v0.36.0
• chore(deps): update googleapis/release-please-action action to v5

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): update github/codeql-action digest to 95e58e9
• chore(deps): update golang:1.26-alpine docker digest to f853308
• chore(deps): update actions/upload-artifact action to v7.0.1
• chore(deps): update googleapis/release-please-action action to v4.4.1
• chore(deps): update softprops/action-gh-release action to v2.6.2
• fix(deps): update aws-sdk-go-v2 monorepo (github.com/aws/aws-sdk-go-v2, github.com/aws/aws-sdk-go-v2/config, github.com/aws/aws-sdk-go-v2/service/secretsmanager)
• fix(deps): update kubernetes monorepo to v0.35.4 (k8s.io/api, k8s.io/apimachinery, k8s.io/client-go)
• fix(deps): update module sigs.k8s.io/controller-runtime to v0.23.3
• chore(deps): update pre-commit hook renovatebot/pre-commit-hooks to v43.136.1
• fix(deps): update module github.com/lib/pq to v1.12.3
• chore(deps): update actions/create-github-app-token action to v3
• chore(deps): update azure/setup-helm action to v5
• chore(deps): update codecov/codecov-action action to v6
• chore(deps): update docker/build-push-action action to v7
• chore(deps): update docker/login-action action to v4
• chore(deps): update docker/metadata-action action to v6
• chore(deps): update docker/setup-buildx-action action to v4
• chore(deps): update docker/setup-qemu-action action to v4
• chore(deps): update softprops/action-gh-release action to v3
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

dockerfile (1)

Dockerfile (2)

• golang 1.26-alpine@sha256:2389ebfa5b7f43eeafbd6be0c3700cc46690ef842ad962f6c5bd6be49ed82039 → [Updates: 1.26-alpine]
• gcr.io/distroless/static nonroot@sha256:e3f945647ffb95b5839c07038d64f9811adf17308b9121d8a2b87b6a22a80a39

github-actions (9)

.github/workflows/build-and-scan.yaml (8)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/setup-go v6.4.0@4a3601121dd01d1626a1e23e37211e3254c1c06c
• docker/setup-buildx-action v3.12.0@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f → [Updates: v4]
• docker/login-action v3.7.0@c94ce9fb468520275223c153574b00df6fe4bcc9 → [Updates: v4.1.0]
• docker/metadata-action v5.10.0@c299e40c65443455700f0fdfc63efafe5b349051 → [Updates: v6]
• docker/build-push-action v6.19.2@10e90e3645eae34f1e60eeb005ba3a3d33f178e8 → [Updates: v7.1.0]
• aquasecurity/trivy-action 0.35.0@57a97c7e7821a5776cebc9bb87c984fa69cba8f1 → [Updates: v0.36.0]
• github/codeql-action v4@c10b8064de6f491fea524254123dbe5e09572f13 → [Updates: v4]

.github/workflows/commitlint.yaml (2)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• wagoid/commitlint-github-action v6@b948419dd99f3fd78a6548d48f94e3df7f6bf3ed

.github/workflows/enable_pr_automerge.yaml

.github/workflows/integration-test.yaml (4)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/setup-go v6.4.0@4a3601121dd01d1626a1e23e37211e3254c1c06c
• codecov/codecov-action v5.5.4@75cd11691c0faa626561e295848008c8a7dddffe → [Updates: v6]
• actions/upload-artifact v7.0.0@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f → [Updates: v7.0.1]

.github/workflows/lint.yaml (2)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/setup-go v6.4.0@4a3601121dd01d1626a1e23e37211e3254c1c06c

.github/workflows/release-please.yaml (2)

• actions/create-github-app-token v2@fee1f7d63c2ff003460e3d139729b119787bc349 → [Updates: v3]
• googleapis/release-please-action v4.4.0@16a9c90856f42705d54a6fda1823352bdc62cf38 → [Updates: v4.4.1, v5]

.github/workflows/release.yaml (16)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• docker/setup-qemu-action v3.7.0@c7c53464625b32c7a7e944ae62b3e17d2b600130 → [Updates: v4]
• docker/setup-buildx-action v3.12.0@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f → [Updates: v4]
• docker/login-action v3.7.0@c94ce9fb468520275223c153574b00df6fe4bcc9 → [Updates: v4.1.0]
• docker/metadata-action v5.10.0@c299e40c65443455700f0fdfc63efafe5b349051 → [Updates: v6]
• docker/build-push-action v6.19.2@10e90e3645eae34f1e60eeb005ba3a3d33f178e8 → [Updates: v7.1.0]
• aquasecurity/trivy-action 0.35.0@57a97c7e7821a5776cebc9bb87c984fa69cba8f1 → [Updates: v0.36.0]
• github/codeql-action v4@c10b8064de6f491fea524254123dbe5e09572f13 → [Updates: v4]
• aquasecurity/trivy-action 0.35.0@57a97c7e7821a5776cebc9bb87c984fa69cba8f1 → [Updates: v0.36.0]
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/setup-go v6.4.0@4a3601121dd01d1626a1e23e37211e3254c1c06c
• softprops/action-gh-release v2.6.1@153bb8e04406b158c6c84fc1615b65b24149a1fe → [Updates: v2.6.2, v3]
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• azure/setup-helm v4.3.1@1a275c3b69536ee54be43f2070a358922e12c8d4 → [Updates: v5]
• docker/login-action v3.7.0@c94ce9fb468520275223c153574b00df6fe4bcc9 → [Updates: v4.1.0]
• softprops/action-gh-release v2.6.1@153bb8e04406b158c6c84fc1615b65b24149a1fe → [Updates: v2.6.2, v3]

.github/workflows/test.yaml (3)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/setup-go v6.4.0@4a3601121dd01d1626a1e23e37211e3254c1c06c
• codecov/codecov-action v5.5.4@75cd11691c0faa626561e295848008c8a7dddffe → [Updates: v6]

.github/workflows/verify-manifests.yaml (2)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/setup-go v6.4.0@4a3601121dd01d1626a1e23e37211e3254c1c06c

gomod (1)

go.mod (13)

• go 1.25.0
• github.com/aws/aws-sdk-go-v2 v1.41.2 → [Updates: v1.41.6]
• github.com/aws/aws-sdk-go-v2/config v1.32.10 → [Updates: v1.32.16]
• github.com/aws/aws-sdk-go-v2/service/secretsmanager v1.41.2 → [Updates: v1.41.6]
• github.com/go-sql-driver/mysql v1.9.3
• github.com/lib/pq v1.11.2 → [Updates: v1.12.3]
• github.com/onsi/ginkgo/v2 v2.28.1
• github.com/onsi/gomega v1.39.1
• github.com/prometheus/client_golang v1.23.2
• k8s.io/api v0.35.2 → [Updates: v0.35.4]
• k8s.io/apimachinery v0.35.2 → [Updates: v0.35.4]
• k8s.io/client-go v0.35.2 → [Updates: v0.35.4]
• sigs.k8s.io/controller-runtime v0.23.1 → [Updates: v0.23.3]

helm-values (1)

helm/database-user-operator/values.yaml (1)

• quay.io/brancz/kube-rbac-proxy v0.21.0@sha256:cbdad91c207e55cf366b59ce3e6c9d3f3e0b8e51ff33c1e7d153c2f762d83a1e → [Updates: v0.21.2]

pre-commit (1)

.pre-commit-config.yaml (6)

• pre-commit/pre-commit-hooks v6.0.0
• alessandrojcm/commitlint-pre-commit-hook v9.24.0
• gitleaks/gitleaks v8.30.1
• hadolint/hadolint v2.14.0
• renovatebot/pre-commit-hooks 43.99.1 → [Updates: 43.136.1]
• TekWizely/pre-commit-golang v1.0.0-rc.4

renovate-config-presets (1)

renovate.json

---

• Check this box to trigger a request for Renovate to run again on this repository