Repository navigation
Dependency Dashboard #3
Description
This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.
Abandoned Dependencies
The following dependencies have not received updates for an extended period and may be unmaintained.
Note
Packages are marked as abandoned when they exceed the abandonmentThreshold since their last release. Unlike deprecated packages with official notices, abandonment is detected by release inactivity.
View abandoned dependencies (1)
| Datasource | Package | Last Updated |
|---|---|---|
| gomod | github.com/go-kit/log | 2022-05-14 |
Rate-Limited
The following updates are currently rate-limited. To force their creation now, click on a checkbox below.
- [skip-release] Update github-actions (major) (
actions/checkout,actions/setup-go,codecov/codecov-action,docker/build-push-action,docker/setup-buildx-action) - chore(deps): update dependency ubuntu to v26
- 🔐 Create all rate-limited PRs at once 🔐
Warning
Renovate failed to look up the following dependencies: Could not determine new digest for update (github-digest package libops/.github).
Files affected: .github/workflows/build-push.yml
Open
The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.
- chore(deps): update module golang.org/x/crypto to v0.56.0 [security]
- chore(deps): update module google.golang.org/grpc to v1.83.1 [security]
- [skip-release] Update github-actions (
actions/checkout,docker/build-push-action,docker/setup-buildx-action) - fix(deps): update bump-dependencies (
alpine,github.com/GoogleCloudPlatform/prometheus-engine,github.com/prometheus/client_golang,golang) - Click on this checkbox to rebase all open PRs at once
PR Closed (Blocked)
The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.
Vulnerabilities
Important
22/26 CVEs have Renovate fixes.
gomod
go.mod
github.com/prometheus/prometheus
github.com/aws/aws-sdk-go
golang.org/x/crypto
Detected Dependencies
dockerfile (1)
Dockerfile (2)
golang 1.25.12-alpine@sha256:56961d79ea8129efddcc0b8643fd8a5416b4e6228cfd477e3fd61deb2672c587→ [Updates:1.27.2-alpine]alpine 3.24@sha256:28bd5fe8b56d1bd048e5babf5b10710ebe0bae67db86916198a6eec434943f8b→ [Updates:3.24]
github-actions (1)
.github/workflows/build-push.yml (10)
actions/checkout v6@df4cb1c069e1874edd31b4311f1884172cec0e10→ [Updates:v7,v6]actions/setup-go v6@924ae3a1cded613372ab5595356fb5720e22ba16→ [Updates:v7]golangci/golangci-lint-action v9@ba0d7d2ec06a0ea1cb5fa41b2e4a3ab91d21278acodecov/codecov-action v5@0fb7174895f61a3b6b78fc075e0cd60383518dac→ [Updates:v7]actions/checkout v6@df4cb1c069e1874edd31b4311f1884172cec0e10→ [Updates:v7,v6]docker/setup-buildx-action v3@e468171a9de216ec08956ac3ada2f0791b6bd435→ [Updates:v4,v3]docker/build-push-action v6@263435318d21b8e681c14492fe198d362a7d2c83→ [Updates:v7,v6]libops/.github credential-free-required-status@057262171193c6d563e7b08ae93d0c4aebfce2bdlibops/.github guarded-signed-image-publisher@a86300fb8020d0f7141bb9f833d89b5dbd7aa4d7ubuntu 24.04→ [Updates:26.04]
gomod (1)
go.mod (8)
go 1.25.8github.com/GoogleCloudPlatform/prometheus-engine v0.8.0→ [Updates:v0.17.2]github.com/go-kit/log v0.2.1github.com/prometheus/client_golang v1.23.2→ [Updates:v1.25.0]github.com/prometheus/prometheus v1.99.0golang.org/x/crypto v0.53.0→ [Updates:v0.56.0]google.golang.org/grpc v1.82.1→ [Updates:v1.83.1]github.com/prometheus/prometheus v0.41.0→ [Updates:v0.311.3]
renovate-config (1)
renovate.json5
- Check this box to trigger a request for Renovate to run again on this repository
Activity