Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Repository Problems

These problems occurred while renovating this repository. View logs.

• ⚠️ WARN: Package lookup failures

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• Update module github.com/prometheus/procfs to v0.22.0
• Update module go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp to v0.71.0
• Update module gomodules.xyz/jsonpatch/v2 to v2.5.0
• Update module k8s.io/streaming to v0.37.0
• Update opentelemetry-go monorepo to v1.46.0 (go.opentelemetry.io/otel, go.opentelemetry.io/otel/exporters/otlp/otlptrace, go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc, go.opentelemetry.io/otel/metric, go.opentelemetry.io/otel/sdk, go.opentelemetry.io/otel/trace)
• Update module github.com/cenkalti/backoff/v5 to v7
• Update module github.com/evanphx/json-patch to v5
• Update module go.yaml.in/yaml/v2 to v3
• Update module gomodules.xyz/jsonpatch/v2 to v3
• Update module gopkg.in/evanphx/json-patch.v4 to v5
• 🔐 Create all rate-limited PRs at once 🔐

Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

• Update github.com/google/pprof digest to 4932ad3
• Update google.golang.org/genproto/googleapis/api digest to 18b4a75
• Update google.golang.org/genproto/googleapis/rpc digest to 18b4a75
• Update docker.io/golang Docker tag to v1.27
• Update module github.com/prometheus/common to v0.71.0
• Update ghcr.io/devcontainers/features/docker-in-docker Docker tag to v4

---

Warning

Renovate failed to look up the following dependencies: Failed to look up go package github.com/Masterminds/semver/v3: no-result, Failed to look up go package k8s.io/client-go: no-result, Failed to look up go package sigs.k8s.io/controller-runtime: no-result, Failed to look up go package github.com/prometheus/client_model: no-result, Failed to look up go package golang.org/x/mod: no-result.

Files affected: go.mod

---

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• Update module google.golang.org/grpc to v1.83.2
• Update kubernetes monorepo to v0.37.0 (k8s.io/api, k8s.io/apiextensions-apiserver, k8s.io/apimachinery, k8s.io/apiserver, k8s.io/component-base, k8s.io/component-helpers)
• Update module github.com/google/cel-go to v0.32.0
• Update module github.com/onsi/gomega to v1.43.0
• Update actions/checkout action to v7
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

devcontainer (1)

.devcontainer/devcontainer.json (3)

• docker.io/golang 1.26 → [Updates: 1.27]
• ghcr.io/devcontainers/features/docker-in-docker 2 → [Updates: 4]
• ghcr.io/devcontainers/features/git 1

dockerfile (1)

Dockerfile (2)

• docker/dockerfile 1.26
• docker.io/golang 1.26 → [Updates: 1.27]

github-actions (4)

.github/workflows/ci.yml (24)

• actions/checkout v6 → [Updates: v7]
• actions/setup-go v7
• golangci/golangci-lint-action v9
• actions/checkout v6 → [Updates: v7]
• actions/setup-go v7
• actions/checkout v6 → [Updates: v7]
• actions/setup-go v7
• actions/checkout v6 → [Updates: v7]
• actions/setup-go v7
• actions/checkout v6 → [Updates: v7]
• docker/setup-qemu-action v4
• docker/setup-buildx-action v4
• docker/build-push-action v7
• actions/checkout v6 → [Updates: v7]
• actions/setup-go v7
• azure/setup-helm v5
• actions/checkout v6 → [Updates: v7]
• actions/setup-go v7
• peaceiris/actions-hugo v3
• actions/checkout v6 → [Updates: v7]
• actions/setup-go v7
• docker/setup-buildx-action v4
• docker/build-push-action v7
• golangci/golangci-lint v2.13.2

.github/workflows/cut-release.yml (1)

• actions/checkout v6 → [Updates: v7]

.github/workflows/docs.yml (5)

• actions/checkout v6 → [Updates: v7]
• actions/setup-go v7
• peaceiris/actions-hugo v3
• actions/upload-pages-artifact v5
• actions/deploy-pages v5

.github/workflows/release.yml (8)

• actions/checkout v6 → [Updates: v7]
• actions/setup-go v7
• docker/login-action v4
• docker/setup-buildx-action v4
• sigstore/cosign-installer v4.1.2
• docker/metadata-action v6
• docker/build-push-action v7
• actions/attest-build-provenance v4

gomod (2)

docs/go.mod (1)

• go 1.26.0

go.mod (103)

• go 1.26.0
• go 1.27.0
• github.com/Masterminds/semver/v3 v3.5.0
• github.com/onsi/ginkgo/v2 v2.32.1
• github.com/onsi/gomega v1.42.1 → [Updates: v1.43.0]
• github.com/prometheus/client_golang v1.24.1
• gopkg.in/yaml.v3 v3.0.1
• k8s.io/api v0.36.4 → [Updates: v0.37.0]
• k8s.io/apimachinery v0.36.4 → [Updates: v0.37.0]
• k8s.io/client-go v0.36.4
• k8s.io/component-helpers v0.36.4 → [Updates: v0.37.0]
• k8s.io/utils v0.0.0-20260707023825-cf1189d6abe3@cf1189d6abe3
• sigs.k8s.io/controller-runtime v0.24.1
• cel.dev/expr v0.25.3
• github.com/antlr4-go/antlr/v4 v4.13.1
• github.com/beorn7/perks v1.0.1
• github.com/blang/semver/v4 v4.0.0
• github.com/cenkalti/backoff/v5 v5.0.3 → [Updates: v7.0.0]
• github.com/cespare/xxhash/v2 v2.3.0
• github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc@d8f796af33cc
• github.com/emicklei/go-restful/v3 v3.13.0
• github.com/evanphx/json-patch v4.13.0+incompatible → [Updates: v5.9.11+incompatible]
• github.com/evanphx/json-patch/v5 v5.9.11
• github.com/felixge/httpsnoop v1.1.0
• github.com/fsnotify/fsnotify v1.10.1
• github.com/fxamacker/cbor/v2 v2.9.3
• github.com/go-logr/logr v1.4.4
• github.com/go-logr/stdr v1.2.2
• github.com/go-logr/zapr v1.3.0
• github.com/go-openapi/jsonpointer v1.0.0
• github.com/go-openapi/jsonreference v1.0.1
• github.com/go-openapi/swag v0.29.1
• github.com/go-openapi/swag/cmdutils v0.29.1
• github.com/go-openapi/swag/conv v0.29.1
• github.com/go-openapi/swag/fileutils v0.29.1
• github.com/go-openapi/swag/jsonutils v0.29.1
• github.com/go-openapi/swag/loading v0.29.1
• github.com/go-openapi/swag/mangling v0.29.1
• github.com/go-openapi/swag/netutils v0.29.1
• github.com/go-openapi/swag/pools v0.29.1
• github.com/go-openapi/swag/stringutils v0.29.1
• github.com/go-openapi/swag/typeutils v0.29.1
• github.com/go-openapi/swag/yamlutils v0.29.1
• github.com/go-task/slim-sprig/v3 v3.0.0
• github.com/google/cel-go v0.31.0 → [Updates: v0.32.0]
• github.com/google/gnostic-models v0.7.1
• github.com/google/go-cmp v0.7.0
• github.com/google/pprof v0.0.0-20260825171938-4d453200e7d9@4d453200e7d9 → [Updates: v0.0.0-20260830191439-4932ad3515ea]
• github.com/google/uuid v1.6.0
• github.com/grpc-ecosystem/grpc-gateway/v2 v2.30.0
• github.com/inconshreveable/mousetrap v1.1.0
• github.com/json-iterator/go v1.1.12
• github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd@bacd9c7ef1dd
• github.com/modern-go/reflect2 v1.0.3-0.20250322232337-35a7c28c31ee@35a7c28c31ee
• github.com/munnerz/goautoneg v0.0.0-20191010083416-a7dc8b61c822@a7dc8b61c822
• github.com/pmezard/go-difflib v1.0.1-0.20181226105442-5d4384ee4fb2@5d4384ee4fb2
• github.com/prometheus/client_model v0.6.2
• github.com/prometheus/common v0.70.1 → [Updates: v0.71.0]
• github.com/prometheus/procfs v0.21.1 → [Updates: v0.22.0]
• github.com/spf13/cobra v1.10.2
• github.com/spf13/pflag v1.0.10
• github.com/x448/float16 v0.8.4
• go.opentelemetry.io/auto/sdk v1.2.1
• go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.70.0 → [Updates: v0.71.0]
• go.opentelemetry.io/otel v1.45.0 → [Updates: v1.46.0]
• go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.45.0 → [Updates: v1.46.0]
• go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.45.0 → [Updates: v1.46.0]
• go.opentelemetry.io/otel/metric v1.45.0 → [Updates: v1.46.0]
• go.opentelemetry.io/otel/sdk v1.45.0 → [Updates: v1.46.0]
• go.opentelemetry.io/otel/trace v1.45.0 → [Updates: v1.46.0]
• go.opentelemetry.io/proto/otlp v1.11.0
• go.uber.org/multierr v1.11.0
• go.uber.org/zap v1.28.0
• go.yaml.in/yaml/v2 v2.4.4 → [Updates: v3.0.5]
• go.yaml.in/yaml/v3 v3.0.5
• golang.org/x/exp v0.0.0-20260824195058-e88cd73687aa@e88cd73687aa
• golang.org/x/mod v0.40.0
• golang.org/x/net v0.58.0
• golang.org/x/oauth2 v0.36.0
• golang.org/x/sync v0.22.0
• golang.org/x/sys v0.47.0
• golang.org/x/term v0.45.0
• golang.org/x/text v0.41.0
• golang.org/x/time v0.15.0
• golang.org/x/tools v0.49.0
• gomodules.xyz/jsonpatch/v2 v2.4.0 → [Updates: v2.5.0, v3.0.1]
• google.golang.org/genproto/googleapis/api v0.0.0-20260825221802-da73d73af1c5@da73d73af1c5 → [Updates: v0.0.0-20260831171406-18b4a7587f8a]
• google.golang.org/genproto/googleapis/rpc v0.0.0-20260825221802-da73d73af1c5@da73d73af1c5 → [Updates: v0.0.0-20260831171406-18b4a7587f8a]
• google.golang.org/grpc v1.83.1 → [Updates: v1.83.2]
• google.golang.org/protobuf v1.36.12
• gopkg.in/evanphx/json-patch.v4 v4.13.0 → [Updates: v5.9.11]
• gopkg.in/inf.v0 v0.9.1
• k8s.io/apiextensions-apiserver v0.36.4 → [Updates: v0.37.0]
• k8s.io/apiserver v0.36.4 → [Updates: v0.37.0]
• k8s.io/component-base v0.36.4 → [Updates: v0.37.0]
• k8s.io/klog/v2 v2.140.0
• k8s.io/kube-openapi v0.0.0-20260821135717-be32def86098@be32def86098
• k8s.io/streaming v0.36.4 → [Updates: v0.37.0]
• sigs.k8s.io/apiserver-network-proxy/konnectivity-client v0.36.0
• sigs.k8s.io/json v0.0.0-20250730193827-2d320260d730@2d320260d730
• sigs.k8s.io/randfill v1.0.0
• sigs.k8s.io/structured-merge-diff/v6 v6.4.2
• sigs.k8s.io/yaml v1.6.0

helm-values (1)

charts/drop/values.yaml

pip_requirements (3)

docs/static/images/src/requirements.txt (3)

• pandas >=2.0
• matplotlib >=3.8
• seaborn >=0.13

research/benchmark/evaluator/requirements.txt (3)

• pandas >=2.2
• numpy >=1.26
• matplotlib >=3.8

research/benchmark/results/ci-image-cache-20runs/evaluator/requirements.txt (3)

• pandas >=2.2
• numpy >=1.26
• matplotlib >=3.8

---

• Check this box to trigger a request for Renovate to run again on this repository