Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• Update kubernetes monorepo to v0.36.0 (k8s.io/api, k8s.io/apimachinery, k8s.io/client-go)
• Update docker/setup-buildx-action action to v4
• Update docker/setup-qemu-action action to v4
• Update golangci/golangci-lint-action action to v9
• 🔐 Create all rate-limited PRs at once 🔐

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• Update module sigs.k8s.io/multicluster-runtime to v0.23.3
• Update github/codeql-action action to v4.35.2
• Update module github.com/kcp-dev/multicluster-provider to v0.6.0
• Update module github.com/kcp-dev/sdk to v0.31.0
• Update module github.com/onsi/ginkgo/v2 to v2.28.1
• Update module github.com/onsi/gomega to v1.39.1
• Update actions/checkout action to v6
• Update actions/setup-go action to v6
• Update docker/login-action action to v4
• Update docker/metadata-action action to v6
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

dockerfile (1)

Dockerfile (1)

• golang 1.26.2

github-actions (6)

.github/workflows/docker.yaml (10)

• actions/checkout v4 → [Updates: v6]
• docker/metadata-action v5 → [Updates: v6]
• docker/setup-qemu-action v3 → [Updates: v4]
• docker/setup-buildx-action v3 → [Updates: v4]
• docker/login-action v3 → [Updates: v4]
• docker/build-push-action v7
• sigstore/cosign-installer v4.1.1
• anchore/sbom-action v0
• actions/attest-sbom v4
• actions/attest-build-provenance v4

.github/workflows/golang.yaml (5)

• actions/checkout v4 → [Updates: v6]
• actions/setup-go v5 → [Updates: v6]
• golangci/golangci-lint-action v7 → [Updates: v9]
• actions/checkout v4 → [Updates: v6]
• actions/setup-go v5 → [Updates: v6]

.github/workflows/helm-lint.yaml (1)

• actions/checkout v4 → [Updates: v6]

.github/workflows/helm-publish.yaml (4)

• actions/checkout v4 → [Updates: v6]
• actions/setup-go v5 → [Updates: v6]
• sigstore/cosign-installer v4.1.1
• docker/login-action v3 → [Updates: v4]

.github/workflows/ossf-scorecard.yml (4)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• ossf/scorecard-action v2.4.3@4eaacf0543bb3f2c246792bd56e8cdeffafb205a
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• github/codeql-action v4.34.1@38697555549f1db7851b81482ff19f1fa5c4fedc → [Updates: v4.35.2]

.github/workflows/osv-scanner.yml (2)

• google/osv-scanner-action v2.3.5@c51854704019a247608d928f370c98740469d4b5
• google/osv-scanner-action v2.3.5@c51854704019a247608d928f370c98740469d4b5

gomod (1)

go.mod (13)

• go 1.26.2
• github.com/kcp-dev/logicalcluster/v3 v3.0.5
• github.com/kcp-dev/multicluster-provider v0.5.1 → [Updates: v0.6.0]
• github.com/kcp-dev/sdk v0.30.0 → [Updates: v0.31.0]
• github.com/onsi/ginkgo/v2 v2.27.2 → [Updates: v2.28.1]
• github.com/onsi/gomega v1.38.2 → [Updates: v1.39.1]
• github.com/stretchr/testify v1.11.1
• k8s.io/api v0.35.4 → [Updates: v0.36.0]
• k8s.io/apimachinery v0.35.4 → [Updates: v0.36.0]
• k8s.io/client-go v0.35.4 → [Updates: v0.36.0]
• sigs.k8s.io/controller-runtime v0.23.3
• sigs.k8s.io/multicluster-runtime v0.23.1 → [Updates: v0.23.3]
• sigs.k8s.io/yaml v1.6.0

helm-values (1)

charts/dependency-controller/values.yaml

regex (1)

flake.nix (1)

• go 1.26.2

---

• Check this box to trigger a request for Renovate to run again on this repository