Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• Update anthropics/claude-code-action action to v1.0.189
• Update aws-sdk-go-v2 monorepo (github.com/aws/aws-sdk-go-v2, github.com/aws/aws-sdk-go-v2/config, github.com/aws/aws-sdk-go-v2/service/sts)
• Update module github.com/go-chi/chi/v5 to v5.3.1
• Update module github.com/go-git/go-billy/v5 to v5.9.1
• Update module github.com/google/go-containerregistry to v0.21.9
• Update module github.com/modelcontextprotocol/registry to v1.8.1
• Update module github.com/ory/x to v0.0.729
• Update module github.com/pressly/goose/v3 to v3.27.3
• Update module github.com/shirou/gopsutil/v4 to v4.26.7
• Update module github.com/sigstore/sigstore to v1.10.9
• Update slackapi/slack-github-action action to v3.0.5
• Update container build actions (docker/build-push-action, docker/login-action, docker/metadata-action, docker/setup-buildx-action)
• Update dependency helm to v3.21.3
• Update dependency helm/helm to v3.21.3
• Update dependency kubernetes-sigs/kind to v0.32.0
• Update dockerfile template base images (ghcr.io/modelcontextprotocol/inspector, index.docker.io/library/alpine)
• Update ghcr.io/stacklok/thv-registry-api Docker tag to v1.5.1
• Update golangci/golangci-lint-action action to v9.3.0
• Update kubernetes dependencies (k8s.io/api, k8s.io/apiextensions-apiserver, k8s.io/apimachinery, k8s.io/client-go, k8s.io/utils, sigs.k8s.io/controller-runtime)
• Update module github.com/1password/onepassword-sdk-go to v0.4.1
• Update module github.com/getsentry/sentry-go to v0.48.0
• Update module github.com/google/cel-go to v0.31.0
• Update module github.com/lestrrat-go/jwx/v3 to v3.2.0
• Update module github.com/pelletier/go-toml/v2 to v2.4.3
• Update module github.com/redis/go-redis/v9 to v9.22.0
• Update module github.com/testcontainers/testcontainers-go to v0.44.0
• Update module github.com/tidwall/gjson to v1.19.0
• Update module go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp to v0.70.0
• Update module modernc.org/sqlite to v1.56.0
• Update testing libraries (github.com/onsi/ginkgo/v2, github.com/onsi/gomega)
• Update actions/setup-node action to v7
• Update cli and ui libraries to v2 (github.com/charmbracelet/bubbles, github.com/charmbracelet/bubbletea, github.com/charmbracelet/lipgloss)
• Update codecov/codecov-action action to v7
• Update core workflow actions (major) (actions/cache, actions/checkout, actions/download-artifact, actions/github-script, actions/upload-artifact)
• Update dependency helm to v4
• Update dependency node to v24
• Update ghcr.io/modelcontextprotocol/inspector Docker tag to v2
• Update module github.com/cenkalti/backoff/v5 to v7
• Update module github.com/lestrrat-go/jwx/v3 to v4
• Update setup and language actions (major) (actions/setup-go, arduino/setup-task)
• Update slackapi/slack-github-action action to v4
• 🔐 Create all rate-limited PRs at once 🔐

PR Edited (Blocked)

The following updates have been manually edited so Renovate will no longer make changes. To discard all commits and start over, click on a checkbox below.

• Update golang.org/x/exp/jsonrpc2 digest to b88d891

---

Warning

Renovate failed to look up the following dependencies: Could not determine new digest for update (github-tags package arduino/setup-task), Could not determine new digest for update (github-digest package helm/kind-action).

Files affected: .github/workflows/e2e-tests.yml, .github/workflows/operator-ci.yml, .github/workflows/test-e2e-lifecycle.yml

---

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• Update anthropics/claude-code-action digest to 6b082c4
• Update github/codeql-action digest to 5595cca
• Update go.starlark.net digest to 5395d01
• Update module github.com/getsentry/sentry-go/otel to v0.48.0
• Click on this checkbox to rebase all open PRs at once

PR Closed (Blocked)

The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.

• Update module github.com/go-jose/go-jose/v3 to v4

Detected Dependencies

dockerfile (1)

containers/egress-proxy/Dockerfile (1)

• alpine 3.24.1

github-actions (27)

.github/workflows/api-compat-noop.yml

.github/workflows/api-compat.yml (2)

• actions/checkout v6@d23441a48e516b6c34aea4fa41551a30e30af803 → [Updates: v7]
• actions/setup-go v6@924ae3a1cded613372ab5595356fb5720e22ba16 → [Updates: v7]

.github/workflows/claude.yml (3)

• actions/checkout v6@d23441a48e516b6c34aea4fa41551a30e30af803 → [Updates: v7]
• actions/setup-go v6@924ae3a1cded613372ab5595356fb5720e22ba16 → [Updates: v7]
• anthropics/claude-code-action v1@be7b93b1907a4abad570368f3c74b6fe3807510b → [Updates: v1]

.github/workflows/create-release-pr.yml (4)

• actions/create-github-app-token v3.2.0@bcd2ba49218906704ab6c1aa796996da409d3eb1
• actions/checkout v6@d23441a48e516b6c34aea4fa41551a30e30af803 → [Updates: v7]
• actions/setup-go v6@924ae3a1cded613372ab5595356fb5720e22ba16 → [Updates: v7]
• stacklok/releaseo v0.0.4@80e8d8131d41cf8763254d02360f2c5ce9b7c0df

.github/workflows/create-release-tag.yml (2)

• actions/create-github-app-token v3.2.0@bcd2ba49218906704ab6c1aa796996da409d3eb1
• actions/checkout v6@d23441a48e516b6c34aea4fa41551a30e30af803 → [Updates: v7]

.github/workflows/e2e-tests.yml (13)

• actions/checkout v6@d23441a48e516b6c34aea4fa41551a30e30af803 → [Updates: v7]
• actions/setup-go v6@924ae3a1cded613372ab5595356fb5720e22ba16 → [Updates: v7]
• arduino/setup-task v2@b91d5d2c96a56797b48ac1e0e89220bf64044611 → [Updates: v3.0.0]
• actions/upload-artifact v6@b7c566a772e6b6bfb58ed0dc250532a479d7789f → [Updates: v7]
• actions/checkout v6@d23441a48e516b6c34aea4fa41551a30e30af803 → [Updates: v7]
• actions/setup-go v6@924ae3a1cded613372ab5595356fb5720e22ba16 → [Updates: v7]
• actions/download-artifact v7@37930b1c2abaa49bbe596cd826c3c89aef350131 → [Updates: v8]
• actions/upload-artifact v6@b7c566a772e6b6bfb58ed0dc250532a479d7789f → [Updates: v7]
• actions/checkout v6@d23441a48e516b6c34aea4fa41551a30e30af803 → [Updates: v7]
• actions/setup-node v4.4.0@49933ea5288caeca8642d1e84afbd3f7d6820020 → [Updates: v7.0.0]
• actions/download-artifact v7@37930b1c2abaa49bbe596cd826c3c89aef350131 → [Updates: v8]
• actions/upload-artifact v6@b7c566a772e6b6bfb58ed0dc250532a479d7789f → [Updates: v7]
• node 22 → [Updates: 24]

.github/workflows/helm-charts-test.yml (8)

• actions/checkout v6@d23441a48e516b6c34aea4fa41551a30e30af803 → [Updates: v7]
• actions/setup-go v6@924ae3a1cded613372ab5595356fb5720e22ba16 → [Updates: v7]
• ko-build/setup-ko v0.10@61b4d1d396f5b2e7d6bb6fefdce3dc38d1a13445
• azure/setup-helm v5.0.1@9bc31f4ebc9c6b171d7bfbaa5d006ae7abdb4310
• helm/chart-testing-action v2.8.0@6ec842c01de15ebb84c8627d2744a0c2f2755c9f
• arduino/setup-task v2 → [Updates: v3.0.0]
• helm/kind-action v1.14.0@ef37e7f390d99f746eb8b610417061a60e82a6cc
• helm v3.20.2 → [Updates: v3.21.3, v4.2.3]

.github/workflows/helm-publish.yml (5)

• actions/checkout v6@d23441a48e516b6c34aea4fa41551a30e30af803 → [Updates: v7]
• actions/checkout v6@d23441a48e516b6c34aea4fa41551a30e30af803 → [Updates: v7]
• azure/setup-helm v5.0.1@9bc31f4ebc9c6b171d7bfbaa5d006ae7abdb4310
• sigstore/cosign-installer v4.1.2@6f9f17788090df1f26f669e9d70d6ae9567deba6
• helm v3.14.0 → [Updates: v3.21.3, v4.2.3]

.github/workflows/image-build-and-publish.yml (29)

• actions/checkout v6@d23441a48e516b6c34aea4fa41551a30e30af803 → [Updates: v7]
• actions/setup-go v6@924ae3a1cded613372ab5595356fb5720e22ba16 → [Updates: v7]
• docker/login-action v4.2.0@650006c6eb7dba73a995cc03b0b2d7f5ca915bee → [Updates: v4.6.0]
• ko-build/setup-ko v0.10@61b4d1d396f5b2e7d6bb6fefdce3dc38d1a13445
• sigstore/cosign-installer v4.1.2@6f9f17788090df1f26f669e9d70d6ae9567deba6
• actions/checkout v6@d23441a48e516b6c34aea4fa41551a30e30af803 → [Updates: v7]
• docker/login-action v4.2.0@650006c6eb7dba73a995cc03b0b2d7f5ca915bee → [Updates: v4.6.0]
• docker/setup-buildx-action v4.1.0@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 → [Updates: v4.2.0]
• docker/metadata-action v6.1.0@80c7e94dd9b9319bd5eb7a0e0fe9291e23a2a2e9 → [Updates: v6.2.0]
• docker/build-push-action v7.2.0@f9f3042f7e2789586610d6e8b85c8f03e5195baf → [Updates: v7.3.0]
• sigstore/cosign-installer v4.1.2@6f9f17788090df1f26f669e9d70d6ae9567deba6
• actions/checkout v6@d23441a48e516b6c34aea4fa41551a30e30af803 → [Updates: v7]
• actions/setup-go v6@924ae3a1cded613372ab5595356fb5720e22ba16 → [Updates: v7]
• arduino/setup-task v2 → [Updates: v3.0.0]
• docker/login-action v4.2.0@650006c6eb7dba73a995cc03b0b2d7f5ca915bee → [Updates: v4.6.0]
• ko-build/setup-ko v0.10@61b4d1d396f5b2e7d6bb6fefdce3dc38d1a13445
• docker/setup-buildx-action v4.1.0@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 → [Updates: v4.2.0]
• sigstore/cosign-installer v4.1.2@6f9f17788090df1f26f669e9d70d6ae9567deba6
• actions/checkout v6@d23441a48e516b6c34aea4fa41551a30e30af803 → [Updates: v7]
• actions/setup-go v6@924ae3a1cded613372ab5595356fb5720e22ba16 → [Updates: v7]
• docker/login-action v4.2.0@650006c6eb7dba73a995cc03b0b2d7f5ca915bee → [Updates: v4.6.0]
• ko-build/setup-ko v0.10@61b4d1d396f5b2e7d6bb6fefdce3dc38d1a13445
• docker/setup-buildx-action v4.1.0@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 → [Updates: v4.2.0]
• sigstore/cosign-installer v4.1.2@6f9f17788090df1f26f669e9d70d6ae9567deba6
• actions/checkout v6@d23441a48e516b6c34aea4fa41551a30e30af803 → [Updates: v7]
• actions/setup-go v6@924ae3a1cded613372ab5595356fb5720e22ba16 → [Updates: v7]
• docker/login-action v4.2.0@650006c6eb7dba73a995cc03b0b2d7f5ca915bee → [Updates: v4.6.0]
• ko-build/setup-ko v0.10@61b4d1d396f5b2e7d6bb6fefdce3dc38d1a13445
• sigstore/cosign-installer v4.1.2@6f9f17788090df1f26f669e9d70d6ae9567deba6

.github/workflows/issue-triage.yml (2)

• actions/checkout v6@d23441a48e516b6c34aea4fa41551a30e30af803 → [Updates: v7]
• anthropics/claude-code-action v1.0.183@be7b93b1907a4abad570368f3c74b6fe3807510b → [Updates: v1.0.189]

.github/workflows/license-headers.yml (2)

• actions/checkout v6@d23441a48e516b6c34aea4fa41551a30e30af803 → [Updates: v7]
• actions/setup-go v6@924ae3a1cded613372ab5595356fb5720e22ba16 → [Updates: v7]

.github/workflows/lint.yml (4)

• actions/checkout v6@d23441a48e516b6c34aea4fa41551a30e30af803 → [Updates: v7]
• actions/setup-go v6@924ae3a1cded613372ab5595356fb5720e22ba16 → [Updates: v7]
• actions/cache v5@caa296126883cff596d87d8935842f9db880ef25 → [Updates: v6]
• golangci/golangci-lint-action v9.2.1@82606bf257cbaff209d206a39f5134f0cfbfd2ee → [Updates: v9.3.0]

.github/workflows/operator-ci.yml (22)

• actions/checkout v6@d23441a48e516b6c34aea4fa41551a30e30af803 → [Updates: v7]
• actions/setup-go v6@924ae3a1cded613372ab5595356fb5720e22ba16 → [Updates: v7]
• arduino/setup-task v2 → [Updates: v3.0.0]
• actions/checkout v6@d23441a48e516b6c34aea4fa41551a30e30af803 → [Updates: v7]
• actions/setup-go v6@924ae3a1cded613372ab5595356fb5720e22ba16 → [Updates: v7]
• arduino/setup-task v2 → [Updates: v3.0.0]
• actions/checkout v6@d23441a48e516b6c34aea4fa41551a30e30af803 → [Updates: v7]
• actions/setup-go v6@924ae3a1cded613372ab5595356fb5720e22ba16 → [Updates: v7]
• arduino/setup-task v2 → [Updates: v3.0.0]
• actions/checkout v6@d23441a48e516b6c34aea4fa41551a30e30af803 → [Updates: v7]
• actions/setup-go v6@924ae3a1cded613372ab5595356fb5720e22ba16 → [Updates: v7]
• arduino/setup-task v2 → [Updates: v3.0.0]
• actions/checkout v6@d23441a48e516b6c34aea4fa41551a30e30af803 → [Updates: v7]
• actions/setup-go v6@924ae3a1cded613372ab5595356fb5720e22ba16 → [Updates: v7]
• arduino/setup-task v2 → [Updates: v3.0.0]
• actions/checkout v6@d23441a48e516b6c34aea4fa41551a30e30af803 → [Updates: v7]
• azure/setup-helm v5.0.1@9bc31f4ebc9c6b171d7bfbaa5d006ae7abdb4310
• ko-build/setup-ko v0.10@61b4d1d396f5b2e7d6bb6fefdce3dc38d1a13445
• actions/setup-go v6@924ae3a1cded613372ab5595356fb5720e22ba16 → [Updates: v7]
• arduino/setup-task v2 → [Updates: v3.0.0]
• kyverno/action-install-chainsaw v0.2.15@1223ef75bedeb59c4e7b5455463d4316e76dff01
• helm/kind-action pin@v1.12.0@ef37e7f390d99f746eb8b610417061a60e82a6cc

.github/workflows/pr-size-label-apply.yml (3)

• actions/download-artifact v7@37930b1c2abaa49bbe596cd826c3c89aef350131 → [Updates: v8]
• actions/github-script v8@ed597411d8f924073f98dfc5c65a23a2325f34cd → [Updates: v9]
• actions/github-script v8@ed597411d8f924073f98dfc5c65a23a2325f34cd → [Updates: v9]

.github/workflows/pr-size-labeler.yml (3)

• actions/github-script v8@ed597411d8f924073f98dfc5c65a23a2325f34cd → [Updates: v9]
• actions/github-script v8@ed597411d8f924073f98dfc5c65a23a2325f34cd → [Updates: v9]
• actions/upload-artifact v6@b7c566a772e6b6bfb58ed0dc250532a479d7789f → [Updates: v7]

.github/workflows/release-notes.yml (5)

• actions/checkout v6@d23441a48e516b6c34aea4fa41551a30e30af803 → [Updates: v7]
• actions/setup-go v6@924ae3a1cded613372ab5595356fb5720e22ba16 → [Updates: v7]
• anthropics/claude-code-action v1@be7b93b1907a4abad570368f3c74b6fe3807510b → [Updates: v1]
• actions/upload-artifact v6@b7c566a772e6b6bfb58ed0dc250532a479d7789f → [Updates: v7]
• slackapi/slack-github-action v3.0.3@45a88b9581bfab2566dc881e2cd66d334e621e2c → [Updates: v3.0.5, v4.0.0]

.github/workflows/releaser.yml (9)

• actions/checkout v6@d23441a48e516b6c34aea4fa41551a30e30af803 → [Updates: v7]
• actions/checkout v6@d23441a48e516b6c34aea4fa41551a30e30af803 → [Updates: v7]
• actions/checkout v6@d23441a48e516b6c34aea4fa41551a30e30af803 → [Updates: v7]
• actions/setup-go v6@924ae3a1cded613372ab5595356fb5720e22ba16 → [Updates: v7]
• anchore/sbom-action v0.24.0@e22c389904149dbc22b58101806040fa8d37a610
• sigstore/cosign-installer v4.1.2@6f9f17788090df1f26f669e9d70d6ae9567deba6
• actions/create-github-app-token v3.2.0@bcd2ba49218906704ab6c1aa796996da409d3eb1
• goreleaser/goreleaser-action v7@f06c13b6b1a9625abc9e6e439d9c05a8f2190e94
• slackapi/slack-github-action v3.0.3@45a88b9581bfab2566dc881e2cd66d334e621e2c → [Updates: v3.0.5, v4.0.0]

.github/workflows/renovate-config-validation.yml (1)

• actions/checkout v6@d23441a48e516b6c34aea4fa41551a30e30af803 → [Updates: v7]

.github/workflows/retest.yaml (1)

• ubuntu 24.04

.github/workflows/security-scan.yml (5)

• actions/checkout v6@d23441a48e516b6c34aea4fa41551a30e30af803 → [Updates: v7]
• anchore/scan-action v7.4.0@e1165082ffb1fe366ebaf02d8526e7c4989ea9d2
• github/codeql-action v4@f205ea1c3313d32999d8d6a48b4f6530d4437b38 → [Updates: v4]
• actions/checkout v6@d23441a48e516b6c34aea4fa41551a30e30af803 → [Updates: v7]
• golang/govulncheck-action v1@032d45514ae346b1db93c04b0c90b841c370344f

.github/workflows/skills-build-and-publish.yml (3)

• actions/checkout v6@d23441a48e516b6c34aea4fa41551a30e30af803 → [Updates: v7]
• actions/setup-go v6@924ae3a1cded613372ab5595356fb5720e22ba16 → [Updates: v7]
• docker/login-action v4.2.0@650006c6eb7dba73a995cc03b0b2d7f5ca915bee → [Updates: v4.6.0]

.github/workflows/spellcheck.yml (2)

• actions/checkout v6@d23441a48e516b6c34aea4fa41551a30e30af803 → [Updates: v7]
• codespell-project/actions-codespell v2@406322ec52dd7b488e48c1c4b82e2a8b3a1bf630

.github/workflows/test-e2e-lifecycle.yml (6)

• actions/checkout v6@d23441a48e516b6c34aea4fa41551a30e30af803 → [Updates: v7]
• azure/setup-helm v5.0.1@9bc31f4ebc9c6b171d7bfbaa5d006ae7abdb4310
• ko-build/setup-ko v0.10@61b4d1d396f5b2e7d6bb6fefdce3dc38d1a13445
• actions/setup-go v6@924ae3a1cded613372ab5595356fb5720e22ba16 → [Updates: v7]
• arduino/setup-task v2 → [Updates: v3.0.0]
• helm/kind-action pin@v1.12.0@ef37e7f390d99f746eb8b610417061a60e82a6cc

.github/workflows/test.yml (7)

• actions/checkout v6@d23441a48e516b6c34aea4fa41551a30e30af803 → [Updates: v7]
• actions/setup-go v6@924ae3a1cded613372ab5595356fb5720e22ba16 → [Updates: v7]
• actions/cache v5@caa296126883cff596d87d8935842f9db880ef25 → [Updates: v6]
• actions/cache v5@caa296126883cff596d87d8935842f9db880ef25 → [Updates: v6]
• arduino/setup-task v2 → [Updates: v3.0.0]
• codecov/codecov-action v6.0.2@fb8b3582c8e4def4969c97caa2f19720cb33a72f → [Updates: v7.0.0]
• coverallsapp/github-action v2@8d6379e14d29928660c4ba802d8e85393440b329

.github/workflows/triage.yml (1)

• stacklok/.github v1@b43e3f174f9bbf2ca4efe6e421a1d007e7fa1b8f

.github/workflows/verify-docgen.yml (2)

• actions/checkout v6@d23441a48e516b6c34aea4fa41551a30e30af803 → [Updates: v7]
• actions/setup-go v6@924ae3a1cded613372ab5595356fb5720e22ba16 → [Updates: v7]

.github/workflows/verify-gen.yml (4)

• actions/checkout v6@d23441a48e516b6c34aea4fa41551a30e30af803 → [Updates: v7]
• actions/setup-go v6@924ae3a1cded613372ab5595356fb5720e22ba16 → [Updates: v7]
• actions/cache v5@caa296126883cff596d87d8935842f9db880ef25 → [Updates: v6]
• arduino/setup-task v2 → [Updates: v3.0.0]

gomod (1)

go.mod (102)

• go 1.26
• dario.cat/mergo v1.0.2
• github.com/1password/onepassword-sdk-go v0.3.1 → [Updates: v0.4.1]
• github.com/alicebob/miniredis/v2 v2.38.0
• github.com/atotto/clipboard v0.1.4
• github.com/aws/aws-sdk-go-v2 v1.43.3 → [Updates: v1.43.4]
• github.com/aws/aws-sdk-go-v2/config v1.32.34 → [Updates: v1.32.35]
• github.com/aws/aws-sdk-go-v2/service/sts v1.45.3 → [Updates: v1.45.4]
• github.com/cedar-policy/cedar-go v1.8.0
• github.com/cenkalti/backoff/v5 v5.0.3 → [Updates: v7.0.0]
• github.com/charmbracelet/bubbles v1.0.0 → [Updates: v2.1.1]
• github.com/charmbracelet/bubbletea v1.3.10 → [Updates: v2.0.8]
• github.com/charmbracelet/lipgloss v1.1.0 → [Updates: v2.0.5]
• github.com/charmbracelet/x/ansi v0.11.7
• github.com/containerd/errdefs v1.0.0
• github.com/coreos/go-oidc/v3 v3.20.0
• github.com/evanphx/json-patch/v5 v5.9.11
• github.com/go-chi/chi/v5 v5.3.0 → [Updates: v5.3.1]
• github.com/go-git/go-billy/v5 v5.9.0 → [Updates: v5.9.1]
• github.com/go-git/go-git/v5 v5.19.2
• github.com/go-jose/go-jose/v3 v3.0.5 → [Updates: v4.1.4]
• github.com/go-jose/go-jose/v4 v4.1.4
• github.com/gofrs/flock v0.13.0
• github.com/google/cel-go v0.30.0 → [Updates: v0.31.0]
• github.com/google/go-cmp v0.7.0
• github.com/google/go-containerregistry v0.21.8 → [Updates: v0.21.9]
• github.com/google/uuid v1.6.0
• github.com/lestrrat-go/httprc/v3 v3.0.6
• github.com/lestrrat-go/jwx/v3 v3.0.13 → [Updates: v3.2.0, v4.2.0]
• github.com/moby/moby/client v0.5.1
• github.com/modelcontextprotocol/registry v1.8.0 → [Updates: v1.8.1]
• github.com/oauth2-proxy/mockoidc v0.0.0-20240214162133-caebfff84d25@caebfff84d25
• github.com/olekukonko/tablewriter v1.1.4
• github.com/onsi/ginkgo/v2 v2.28.1 → [Updates: v2.32.0]
• github.com/onsi/gomega v1.39.1 → [Updates: v1.42.1]
• github.com/ory/fosite v0.49.0
• github.com/pelletier/go-toml/v2 v2.3.1 → [Updates: v2.4.3]
• github.com/pkg/browser v0.0.0-20240102092130-5ac0b6a4141c@5ac0b6a4141c
• github.com/pressly/goose/v3 v3.27.1 → [Updates: v3.27.3]
• github.com/prometheus/client_model v0.6.2
• github.com/prometheus/common v0.70.1
• github.com/redis/go-redis/v9 v9.21.0 → [Updates: v9.22.0]
• github.com/shirou/gopsutil/v4 v4.26.5 → [Updates: v4.26.7]
• github.com/spf13/viper v1.21.0
• github.com/stacklok/toolhive-catalog v0.20260804.0
• github.com/stacklok/toolhive-core v0.0.38
• github.com/stretchr/testify v1.11.1
• github.com/swaggo/swag/v2 v2.0.0-rc5
• github.com/tailscale/hujson v0.0.0-20260727124030-b80ff77dac4f@b80ff77dac4f
• github.com/testcontainers/testcontainers-go v0.42.0 → [Updates: v0.44.0]
• github.com/tidwall/gjson v1.18.0 → [Updates: v1.19.0]
• github.com/xeipuuv/gojsonschema v1.2.0
• github.com/zalando/go-keyring v0.2.8
• go.opentelemetry.io/otel/sdk v1.45.0
• go.opentelemetry.io/otel/sdk/metric v1.45.0
• go.uber.org/mock v0.6.0
• go.uber.org/zap v1.28.0
• golang.ngrok.com/ngrok/v2 v2.1.4
• golang.org/x/exp/jsonrpc2 v0.0.0-20260709172345-9ea1abe57597@9ea1abe57597 → [Updates: v0.0.0-20260727155853-b88d891fe743]
• golang.org/x/mod v0.38.0
• golang.org/x/oauth2 v0.36.0
• golang.org/x/sync v0.22.0
• golang.org/x/term v0.45.0
• golang.org/x/time v0.15.0
• gopkg.in/yaml.v3 v3.0.1
• k8s.io/api v0.35.3 → [Updates: v0.36.3]
• k8s.io/apimachinery v0.35.3 → [Updates: v0.36.3]
• k8s.io/utils v0.0.0-20260319190234-28399d86e0b5@28399d86e0b5 → [Updates: v0.0.0-20260707023825-cf1189d6abe3]
• modernc.org/sqlite v1.49.1 → [Updates: v1.56.0]
• sigs.k8s.io/controller-runtime v0.23.3 → [Updates: v0.24.1]
• sigs.k8s.io/yaml v1.6.0
• github.com/getsentry/sentry-go/otel v0.44.1 → [Updates: v0.48.0]
• github.com/hashicorp/golang-lru/v2 v2.0.7
• github.com/github/smimesign v0.2.0
• go.starlark.net v0.0.0-20260630144053-529d8e869a14@529d8e869a14 → [Updates: v0.0.0-20260708150628-5395d018f003]
• github.com/getsentry/sentry-go v0.47.0 → [Updates: v0.48.0]
• github.com/moby/moby/api v1.55.0
• github.com/muesli/termenv v0.16.0
• github.com/ory/x v0.0.665 → [Updates: v0.0.729]
• github.com/sigstore/protobuf-specs v0.5.1
• github.com/sigstore/sigstore v1.10.8 → [Updates: v1.10.9]
• github.com/sigstore/sigstore-go v1.3.0
• github.com/yosida95/uritemplate/v3 v3.0.2
• go.opentelemetry.io/proto/otlp v1.11.0
• google.golang.org/protobuf v1.36.11
• k8s.io/apiextensions-apiserver v0.35.0 → [Updates: v0.36.3]
• oras.land/oras-go/v2 v2.6.2
• github.com/Microsoft/go-winio v0.6.2
• github.com/adrg/xdg v0.5.3
• github.com/go-logr/logr v1.4.4
• github.com/golang-jwt/jwt/v5 v5.3.1
• github.com/opencontainers/go-digest v1.0.0
• github.com/opencontainers/image-spec v1.1.1
• github.com/spf13/cobra v1.10.2
• github.com/spf13/pflag v1.0.10
• go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.68.0 → [Updates: v0.70.0]
• go.opentelemetry.io/otel v1.45.0
• go.opentelemetry.io/otel/metric v1.45.0
• go.opentelemetry.io/otel/trace v1.45.0
• golang.org/x/crypto v0.54.0
• golang.org/x/sys v0.47.0
• k8s.io/client-go v0.35.3 → [Updates: v0.36.3]

helm-values (1)

deploy/charts/operator/values.yaml (4)

• ghcr.io/stacklok/toolhive/operator v0.42.0
• ghcr.io/stacklok/toolhive/proxyrunner v0.42.0
• ghcr.io/stacklok/toolhive/vmcp v0.42.0
• ghcr.io/stacklok/thv-registry-api v1.3.0 → [Updates: v1.5.1]

regex (8)

.github/workflows/helm-charts-test.yml (1)

• helm/helm 3.20.2 → [Updates: 3.21.3, 4.2.3]

.github/workflows/operator-ci.yml (3)

• kindest/node 1.33.7 → [Updates: 1.36.1]
• kindest/node 1.34.3 → [Updates: 1.36.1]
• kindest/node 1.35.1 → [Updates: 1.36.1]

.github/workflows/operator-ci.yml (1)

• kubernetes-sigs/kind 0.31.0 → [Updates: 0.32.0]

.github/workflows/operator-ci.yml (1)

• kyverno/chainsaw 0.2.15

.github/workflows/test-e2e-lifecycle.yml (3)

• kindest/node 1.33.7 → [Updates: 1.36.1]
• kindest/node 1.34.3 → [Updates: 1.36.1]
• kindest/node 1.35.1 → [Updates: 1.36.1]

.github/workflows/test-e2e-lifecycle.yml (1)

• kubernetes-sigs/kind 0.31.0 → [Updates: 0.32.0]

cmd/thv/app/inspector/version.go (1)

• ghcr.io/modelcontextprotocol/inspector 0.21.2 → [Updates: 0.22.0, 2.1.0]

pkg/container/templates/go.tmpl (1)

• index.docker.io/library/alpine 3.23@sha256:5b10f432ef3da1b8d4c7eb6c487f2f5a8f096bc91145e68878dd4a5019afde11 → [Updates: 3.24, 3.23]

---

• Check this box to trigger a request for Renovate to run again on this repository