Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

This repository currently has no open or pending branches.

Detected dependencies

dockerfile

test/dockerfiles/postgres.dockerfile

• postgres latest@sha256:81f32a88ec561664634637dd446487efd5f9d90996304b96210078e90e5c8b21
• postgres latest@sha256:81f32a88ec561664634637dd446487efd5f9d90996304b96210078e90e5c8b21

test/dockerfiles/universal.Dockerfile

• ghcr.io/kumahq/ubuntu-netools main@sha256:5417a86c3f7d67be1e18a144fff765cde9c1d6839145a6771855989752dfcda2

tools/releases/dockerfiles/base-root.Dockerfile

• gcr.io/distroless/base-nossl-debian12 debug@sha256:1368c7b5edff36920f9169f87f8e8108f532b6f343ab68ce7895a184bbfdb930

tools/releases/dockerfiles/base.Dockerfile

• gcr.io/distroless/base-nossl-debian12 debug-nonroot@sha256:393a39691519a85382db0f75cedffc6f0208911484d138b2afc46c7d218e46af

tools/releases/dockerfiles/envoy.Dockerfile

• debian 12.10@sha256:18023f131f52fc3ea21973cabffe0b216c60b417fd2478e94d9d59981ebba6af

tools/releases/dockerfiles/kuma-cni.Dockerfile

tools/releases/dockerfiles/kuma-cp.Dockerfile

tools/releases/dockerfiles/kuma-dp.Dockerfile

tools/releases/dockerfiles/kuma-init.Dockerfile

• gcr.io/k8s-staging-build-image/distroless-iptables v0.7.3@sha256:25cc119a89bf860f964e5c47d0422eabcd260424692a2b6d4e7a74d5c3bb2231

tools/releases/dockerfiles/kumactl.Dockerfile

tools/releases/dockerfiles/static.Dockerfile

• gcr.io/distroless/static-debian12 debug-nonroot@sha256:14a28be5b9e710e8d5a519cd7d76ab2714b35edb641307c07a264372ed0c81a9

github-actions

.github/workflows/_build_publish.yaml

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/setup-go v5.4.0@0aaccfd150d50ccaeb58ebd88d36e91967a5f35b
• actions/cache v4.2.3@5a3ec84eff668545956fd18022155c47e93e2684
• actions/upload-artifact v4.6.2@ea165f8d65b6e75b540449e92b4886f43607fa02
• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/setup-go v5.4.0@0aaccfd150d50ccaeb58ebd88d36e91967a5f35b
• actions/cache v4.2.3@5a3ec84eff668545956fd18022155c47e93e2684
• regclient/actions ce5fd131e371ffcdd7508b478cb223b3511a9183
• actions/upload-artifact v4.6.2@ea165f8d65b6e75b540449e92b4886f43607fa02
• actions/upload-artifact v4.6.2@ea165f8d65b6e75b540449e92b4886f43607fa02
• actions/download-artifact v4.2.1@95815c38cf2ff2164869cbab79da8d1f422bc89e
• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/setup-go v5.4.0@0aaccfd150d50ccaeb58ebd88d36e91967a5f35b
• actions/cache v4.2.3@5a3ec84eff668545956fd18022155c47e93e2684
• actions/upload-artifact v4.6.2@ea165f8d65b6e75b540449e92b4886f43607fa02
• actions/create-github-app-token v2.0.2@3ff1caaa28b64c9cc276ce0a02e2ff584f3900c5
• ubuntu 24.04
• ubuntu 24.04
• ubuntu 24.04
• ubuntu 24.04

.github/workflows/_e2e.yaml

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/setup-go v5.4.0@0aaccfd150d50ccaeb58ebd88d36e91967a5f35b
• actions/cache v4.2.3@5a3ec84eff668545956fd18022155c47e93e2684
• nick-fields/retry v3.0.2@ce71cc2ab81d554ebbe88c79ab5975992d79ba08
• actions/upload-artifact v4.6.2@ea165f8d65b6e75b540449e92b4886f43607fa02
• actions/upload-artifact v4.6.2@ea165f8d65b6e75b540449e92b4886f43607fa02

.github/workflows/_provenance.yaml

• slsa-framework/slsa-github-generator v2.1.0
• slsa-framework/slsa-github-generator v2.1.0

.github/workflows/_test.yaml

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/setup-go v5.4.0@0aaccfd150d50ccaeb58ebd88d36e91967a5f35b
• actions/cache v4.2.3@5a3ec84eff668545956fd18022155c47e93e2684
• ubuntu 24.04
• ubuntu 24.04

.github/workflows/auto-merge.yaml

• actions/create-github-app-token v2.0.2@3ff1caaa28b64c9cc276ce0a02e2ff584f3900c5
• ubuntu 24.04

.github/workflows/backport.yaml

• marocchino/sticky-pull-request-comment v2.9.1@52423e01640425a022ef5fd42c6fb5f633a02728
• tibdex/github-app-token v2.1.0@3beb63f4bd073e61482598c45c71c1019b59b73a
• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• peter-evans/create-pull-request v7.0.8@271a8d0340265f705b14b6d32b9829c1cb33d45e

.github/workflows/bom.yaml

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/setup-go v5.4.0@0aaccfd150d50ccaeb58ebd88d36e91967a5f35b
• CycloneDX/gh-gomod-generate-sbom v2.0.0@efc74245d6802c8cefd925620515442756c70d8f
• actions/upload-artifact v4.6.2@ea165f8d65b6e75b540449e92b4886f43607fa02
• ubuntu 24.04

.github/workflows/build-test-distribute.yaml

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/setup-go v5.4.0@0aaccfd150d50ccaeb58ebd88d36e91967a5f35b
• golangci/golangci-lint-action v7.0.0@1481404843c368bc19ca9406f87d6e0fc97bdcfd
• actions/cache v4.2.3@5a3ec84eff668545956fd18022155c47e93e2684
• actions/download-artifact v4.2.1@95815c38cf2ff2164869cbab79da8d1f422bc89e
• actions/download-artifact v4.2.1@95815c38cf2ff2164869cbab79da8d1f422bc89e
• cloudsmith-io/action v0.6.14@7af394e0f8add4867bce109385962dafecad1b8d
• ubuntu 24.04
• ubuntu 24.04

.github/workflows/check.yaml

• ubuntu 24.04

.github/workflows/ci-stability-master.yaml

• ubuntu 24.04

.github/workflows/ci-stability-release-branches.yaml

• ubuntu 24.04
• ubuntu 24.04

.github/workflows/ci-stability.yaml

• actions/create-github-app-token v2.0.2@3ff1caaa28b64c9cc276ce0a02e2ff584f3900c5
• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• ubuntu 24.04

.github/workflows/codeql.yaml

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/setup-go v5.4.0@0aaccfd150d50ccaeb58ebd88d36e91967a5f35b
• github/codeql-action v3.28.14@fc7e4a0fa01c3cca5fd6a1fddec5c0740c977aa2
• github/codeql-action v3.28.14@fc7e4a0fa01c3cca5fd6a1fddec5c0740c977aa2
• github/codeql-action v3.28.14@fc7e4a0fa01c3cca5fd6a1fddec5c0740c977aa2
• ubuntu 24.04

.github/workflows/lifecycle.yml

• kumahq/.github 417fa247cd071cad8628a63bf54ca54fd8baf96d

.github/workflows/merge-release-to-master.yaml

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/setup-go v5.4.0@0aaccfd150d50ccaeb58ebd88d36e91967a5f35b
• actions/create-github-app-token v2.0.2@3ff1caaa28b64c9cc276ce0a02e2ff584f3900c5
• peter-evans/create-pull-request v7.0.8@271a8d0340265f705b14b6d32b9829c1cb33d45e
• ubuntu 24.04

.github/workflows/pr-comments.yaml

• actions/create-github-app-token v2.0.2@3ff1caaa28b64c9cc276ce0a02e2ff584f3900c5
• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/setup-go v5.4.0@0aaccfd150d50ccaeb58ebd88d36e91967a5f35b
• actions/cache v4.2.3@5a3ec84eff668545956fd18022155c47e93e2684
• ubuntu 24.04

.github/workflows/pr-merged.yaml

• actions/github-script v7.0.1@60a0d83039c74a4aee543508d2ffcb1c3799cdea
• ubuntu 24.04

.github/workflows/pr-modification.yaml

• marocchino/sticky-pull-request-comment v2.9.1@52423e01640425a022ef5fd42c6fb5f633a02728
• ubuntu 24.04
• ubuntu 24.04

.github/workflows/release.yaml

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/setup-go v5.4.0@0aaccfd150d50ccaeb58ebd88d36e91967a5f35b
• actions/create-github-app-token v2.0.2@3ff1caaa28b64c9cc276ce0a02e2ff584f3900c5
• peter-evans/create-pull-request v7.0.8@271a8d0340265f705b14b6d32b9829c1cb33d45e
• ubuntu 24.04

.github/workflows/scorecard.yml

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• ossf/scorecard-action v2.4.1@f49aabe0b5af0936a0987cfb85d86b75731b0186
• actions/upload-artifact v4.6.2@ea165f8d65b6e75b540449e92b4886f43607fa02
• github/codeql-action v3.28.14@fc7e4a0fa01c3cca5fd6a1fddec5c0740c977aa2
• ubuntu 24.04

.github/workflows/transparentproxy-tests.yaml

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/setup-go v5.4.0@0aaccfd150d50ccaeb58ebd88d36e91967a5f35b
• actions/cache v4.2.3@5a3ec84eff668545956fd18022155c47e93e2684
• ubuntu 24.04

.github/workflows/update-docs.yaml

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/setup-go v5.4.0@0aaccfd150d50ccaeb58ebd88d36e91967a5f35b
• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/create-github-app-token v2.0.2@3ff1caaa28b64c9cc276ce0a02e2ff584f3900c5
• peter-evans/create-pull-request v7.0.8@271a8d0340265f705b14b6d32b9829c1cb33d45e
• ubuntu 24.04

.github/workflows/update-insecure-dependencies.yaml

• pierotofy/set-swap-space 0404882bc4666c0ff2f6fd8b3d32af69a730183c
• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/setup-go v5.4.0@0aaccfd150d50ccaeb58ebd88d36e91967a5f35b
• actions/create-github-app-token v2.0.2@3ff1caaa28b64c9cc276ce0a02e2ff584f3900c5
• peter-evans/create-pull-request v7.0.8@271a8d0340265f705b14b6d32b9829c1cb33d45e
• ubuntu 24.04
• ubuntu 24.04

gomod

go.mod

• go 1.24.1
• cirello.io/pglock v1.16.0
• github.com/Masterminds/semver/v3 v3.3.1
• github.com/Masterminds/sprig/v3 v3.3.0
• github.com/Nordix/simple-ipam v1.0.0
• github.com/asaskevich/govalidator v0.0.0-20230301143203-a9d515a09cc2@a9d515a09cc2
• github.com/bakito/go-log-logr-adapter v0.0.3-0.20240527124623-de85860b7d21@de85860b7d21
• github.com/cilium/ebpf v0.18.0
• github.com/containernetworking/cni v1.3.0
• github.com/containernetworking/plugins v1.6.2
• github.com/emicklei/go-restful/v3 v3.12.2
• github.com/envoyproxy/go-control-plane v0.13.4
• github.com/envoyproxy/go-control-plane/contrib v1.32.4
• github.com/envoyproxy/go-control-plane/envoy v1.32.4
• github.com/envoyproxy/protoc-gen-validate v1.2.1
• github.com/evanphx/json-patch/v5 v5.9.11
• github.com/exaring/otelpgx v0.9.0
• github.com/go-logr/logr v1.4.2
• github.com/go-logr/zapr v1.3.0
• github.com/goburrow/cache v0.1.4
• github.com/golang-jwt/jwt/v5 v5.2.2
• github.com/golang-migrate/migrate/v4 v4.18.2
• github.com/golang/protobuf v1.5.4
• github.com/google/go-cmp v0.7.0
• github.com/google/uuid v1.6.0
• github.com/grpc-ecosystem/go-grpc-prometheus v1.2.0
• github.com/gruntwork-io/terratest v0.48.2
• github.com/hoisie/mustache v0.0.0-20160804235033-6375acf62c69@6375acf62c69
• github.com/jackc/pgx/v5 v5.7.4
• github.com/josephburnett/jd/v2 v2.2.2
• github.com/kelseyhightower/envconfig v1.4.0
• github.com/miekg/dns v1.1.65
• github.com/moby/sys/mountinfo v0.7.2
• github.com/natefinch/atomic v1.0.1
• github.com/onsi/ginkgo/v2 v2.23.4
• github.com/onsi/gomega v1.37.0
• github.com/patrickmn/go-cache v2.1.0+incompatible
• github.com/pkg/errors v0.9.1
• github.com/prometheus/client_golang v1.21.1
• github.com/prometheus/client_model v0.6.1
• github.com/prometheus/common v0.63.0
• github.com/sethvargo/go-retry v0.3.0
• github.com/shopspring/decimal v1.4.0
• github.com/slok/go-http-metrics v0.13.0
• github.com/spf13/cobra v1.9.1
• github.com/spf13/pflag v1.0.6
• github.com/spiffe/go-spiffe/v2 v2.5.0
• github.com/testcontainers/testcontainers-go v0.36.0
• github.com/tonglil/opentelemetry-go-datadog-propagator v0.1.3
• github.com/vishvananda/netlink v1.3.0
• github.com/vishvananda/netns v0.0.5
• go.opentelemetry.io/contrib/instrumentation/github.com/emicklei/go-restful/otelrestful v0.60.0
• go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.60.0
• go.opentelemetry.io/otel v1.35.0
• go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc v1.35.0
• go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.35.0
• go.opentelemetry.io/otel/exporters/prometheus v0.57.0
• go.opentelemetry.io/otel/sdk v1.35.0
• go.opentelemetry.io/otel/sdk/metric v1.35.0
• go.opentelemetry.io/otel/trace v1.35.0
• go.opentelemetry.io/proto/otlp v1.5.0
• go.uber.org/multierr v1.11.0
• go.uber.org/zap v1.27.0
• golang.org/x/net v0.38.0
• golang.org/x/sync v0.13.0
• golang.org/x/sys v0.32.0
• golang.org/x/text v0.24.0
• gonum.org/v1/gonum v0.16.0
• google.golang.org/genproto/googleapis/api v0.0.0-20250218202821-56aae31c358a@56aae31c358a
• google.golang.org/genproto/googleapis/rpc v0.0.0-20250218202821-56aae31c358a@56aae31c358a
• google.golang.org/grpc v1.71.1
• google.golang.org/protobuf v1.36.6
• gopkg.in/natefinch/lumberjack.v2 v2.2.1
• helm.sh/helm/v3 v3.17.2
• k8s.io/api v0.32.3
• k8s.io/apiextensions-apiserver v0.32.3
• k8s.io/apimachinery v0.32.3
• k8s.io/client-go v0.32.3
• k8s.io/klog/v2 v2.130.1
• k8s.io/kube-openapi v0.0.0-20241212222426-2c72e554b1e7@2c72e554b1e7
• k8s.io/kubectl v0.32.3
• k8s.io/utils v0.0.0-20241210054802-24370beab758@24370beab758
• sigs.k8s.io/controller-runtime v0.20.4
• sigs.k8s.io/controller-tools v0.17.3
• sigs.k8s.io/gateway-api v1.2.1
• sigs.k8s.io/yaml v1.4.0
• github.com/invopop/jsonschema v0.13.0
• github.com/wk8/go-ordered-map/v2 v2.1.8
• golang.org/x/crypto v0.37.0
• golang.org/x/exp v0.0.0-20250305212735-054e65f0b394@054e65f0b394
• golang.org/x/tools v0.31.0

helm-values

deployments/charts/kuma/values.yaml

• kuma-cp undefined
• kuma-cni undefined
• kuma-dp undefined
• kuma-init undefined
• kumactl undefined
• docker.io/bitnami/kubectl 1.32.3@sha256:c49b008f8ac9973e2d23deff64db6b992b8bd8c76538d0e697d9318bbbf683e2

kubernetes

app/kumactl/data/install/k8s/demo/demo.yaml

• redis sha256:6aafb7f25fc93c4ff74e99cff8e85899f03901bc96e61ba12cd3c39e95503c73
• kumahq/kuma-demo sha256:9b11fb97144523cd5d5cc021445dd7f59d4b72bc49727fefbdf0d3f07a7dd5c1
• Deployment apps/v1
• Deployment apps/v1

app/kumactl/data/install/k8s/logging/loki/loki.yaml

• grafana/promtail 3.4.3@sha256:168eb785ce3603fa1bfdd9d44840d3fe81e644bf9d3c64a0f4a19e993c5ff050
• grafana/loki 3.4.3@sha256:5fe9fa99e9a747297cdf0239a5b25d192d8f668bd6505b09beef4dffcab5aac2

app/kumactl/data/install/k8s/metrics/grafana/grafana.yaml

• alpine sha256:a8560b36e8b8210634f77d9f7f9efd7ffa463e380b75e2e74aff4511df3ef88c
• grafana/grafana 11.6.0@sha256:62d2b9d20a19714ebfe48d1bb405086081bc602aa053e28cf6d73c7537640dfb

app/kumactl/data/install/k8s/metrics/prometheus/kube-stats-metrics.yaml

• bitnami/kube-state-metrics 2.15.0@sha256:929ee8c6bb15788412becb9de354098121517771f3ecf5dc94a3148854243c3c
• ClusterRole rbac.authorization.k8s.io/v1
• ClusterRoleBinding rbac.authorization.k8s.io/v1
• Deployment apps/v1

app/kumactl/data/install/k8s/metrics/prometheus/server.yaml

• jimmidyson/configmap-reload v0.9.0@sha256:f34fe394b1dab3982025c4107df5526ca773bc245adac7dbef877ccb5f5d5df5
• prom/prometheus v3.2.1@sha256:6927e0919a144aa7616fd0137d4816816d42f6b816de3af269ab065250859a62
• ClusterRole rbac.authorization.k8s.io/v1
• ClusterRoleBinding rbac.authorization.k8s.io/v1
• Deployment apps/v1

app/kumactl/data/install/k8s/tracing/jaeger/all-in-one-template.yaml

• jaegertracing/all-in-one 1.68.0@sha256:6279882637ae03e70f519965d2ba5ca84cb785f4baf4f0d7237e827a37c33a42

regex

.github/workflows/_build_publish.yaml

• security-actions/scan-docker-image 4.1.5@b78573f2af8072c7b396620f199ea129ac703bb7
• security-actions/scan-docker-image 4.1.5@b78573f2af8072c7b396620f199ea129ac703bb7
• security-actions/sign-docker-image 4.1.1@a18abf762d6e2444bcbfd20de70451ea1e3bc1b1

.github/workflows/build-test-distribute.yaml

• security-actions/sca 4.1.1@a18abf762d6e2444bcbfd20de70451ea1e3bc1b1

go.mod

• go-control-plane v0.13.4-kong-1
• envoy v1.32.4-kong-1
• contrib v1.32.4-kong-1
• ratelimit v0.1.0-kong-1

---

• Check this box to trigger a request for Renovate to run again on this repository