Dependency Dashboard 🤖

[cluster-stack-bot]

Config Migration Needed

• Select this checkbox to let Renovate create an automated Config Migration PR.

Repository problems

Renovate tried to run on this repository, but found these problems.

• WARN: Package lookup failures

Awaiting Schedule

These updates are awaiting their schedule. Click on a checkbox to get an update now.

• 🌱 Update Github Actions group to v41.0.13

Edited/Blocked

These updates have been manually edited so Renovate will no longer make changes. To discard all commits and start over, click on a checkbox.

• 🌱 Update Builder Image group (aquasecurity/trivy, golangci/golangci-lint, kubernetes-sigs/cluster-api, kubernetes-sigs/controller-tools, kubernetes-sigs/kind)

---

Warning

Renovate failed to look up the following dependencies: Failed to look up github-tags package kubernetes-sigs/kustomize extractVersion=^kustomize\/v(?<version>.+)$.

Files affected: images/builder/Dockerfile

---

Open

These updates have all been created already. Click a checkbox below to force a retry/rebase of any.

• 🌱 Update github-actions group (actions/create-github-app-token, docker/setup-buildx-action, docker/setup-qemu-action, sigstore/cosign-installer)
• 🌱 Update Update Golang Dependencies group (patch) (github.com/gophercloud/utils/v2, go)
• 🌱 Update Update Golang Dependencies group (minor) (github.com/gophercloud/gophercloud/v2, go, sigs.k8s.io/cluster-api-provider-openstack)
• Click on this checkbox to rebase all open PRs at once

Detected dependencies

dockerfile

images/builder/Dockerfile

• docker.io/lycheeverse/lychee 0.15.1
• docker.io/hadolint/hadolint v2.12.0-alpine@sha256:3c206a451cec6d486367e758645269fd7d696c5ccb6ff59d8b03b0e45268a199
• docker.io/library/golang 1.23.3-bullseye

images/cache/Dockerfile

• docker.io/library/alpine 3.21.2@sha256:56fa17d2a7e7f168a043a2712e63aed1f8543aeafdcee47c58dcffe38ed51099
• docker.io/library/alpine 3.21.2@sha256:56fa17d2a7e7f168a043a2712e63aed1f8543aeafdcee47c58dcffe38ed51099

images/cspo/Dockerfile

• docker.io/library/golang 1.23.5-bullseye
• docker.io/library/alpine 3.21.2

github-actions

.github/actions/metadata/action.yaml

• docker/metadata-action v5.6.1@369eb591f429131d6889c46b94e711f089e6ca96

.github/actions/setup-go/action.yaml

• actions/setup-go v5.3.0@f111f3307d8850f501ac008e886eec1fd1932a34
• actions/cache v4@1bd1e32a3bdc45362d1e726936510720a7c30a57
• actions/cache v4@1bd1e32a3bdc45362d1e726936510720a7c30a57

.github/workflows/build.yaml

• actions/checkout v4@11bd71901bbe5b1630ceea73d27597364c9af683
• docker/setup-qemu-action v3@53851d14592bedcffcf25ea515637cff71ef929a
• docker/setup-buildx-action v3@6524bf65af31da8d45b59e8c27de4bd072b392f5
• docker/login-action v3.3.0@9780b0c442fbb1117ed29e0efdff1e18412f7567
• sigstore/cosign-installer v3.7.0@dc72c7d5c4d10cd6bcb8cf6e3fd625a9e5e537da
• actions/cache v4.2.0@1bd1e32a3bdc45362d1e726936510720a7c30a57
• docker/build-push-action v6.13.0@ca877d9245402d1537745e0e356eab47c3520991
• docker/build-push-action v6@ca877d9245402d1537745e0e356eab47c3520991
• actions/upload-artifact v4.6.0@65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08
• docker/build-push-action v6.13.0@ca877d9245402d1537745e0e356eab47c3520991

.github/workflows/kubebuilder-markers-checker.yaml

• actions/checkout v4@11bd71901bbe5b1630ceea73d27597364c9af683
• ubuntu 24.04

.github/workflows/pr-lint.yaml

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• ghcr.io/sovereigncloudstack/cspo-builder 0.1.5

.github/workflows/pr-verify.yaml

• kubernetes-sigs/kubebuilder-release-tools v0.4.3@012269a88fa4c034a0acf1ba84c26b195c0dbab4
• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/setup-node v4@1d0ff469b7ec7b3cb9d8673fde0c81c44821de2a
• actions/create-github-app-token v1@c1a285145b9d317df6ced56c09f525b5c2b6f755
• pascalgn/size-label-action v0.5.5@f8edde36b3be04b4f65dcfead05dc8691b374348
• actions/labeler v5@8558fd74291d67161a8a78ce36a881fa63b766a9
• EndBug/label-sync v2@52074158190acb45f3077f9099fea818aa43f97a

.github/workflows/release.yaml

• actions/checkout v4@11bd71901bbe5b1630ceea73d27597364c9af683
• docker/setup-qemu-action v3@53851d14592bedcffcf25ea515637cff71ef929a
• docker/setup-buildx-action v3@6524bf65af31da8d45b59e8c27de4bd072b392f5
• docker/login-action v3.3.0@9780b0c442fbb1117ed29e0efdff1e18412f7567
• sigstore/cosign-installer v3.7.0@dc72c7d5c4d10cd6bcb8cf6e3fd625a9e5e537da
• docker/build-push-action v6@ca877d9245402d1537745e0e356eab47c3520991
• actions/upload-artifact v4.6.0@65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08
• actions/checkout v4@11bd71901bbe5b1630ceea73d27597364c9af683
• softprops/action-gh-release v2@c95fe1489396fe8a9eb87c0abf8aa5b2ef267fda

.github/workflows/report-bin-size.yaml

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/setup-go v5.3.0@f111f3307d8850f501ac008e886eec1fd1932a34
• actions/upload-artifact v4.6.0@65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08

.github/workflows/schedule-cache-cleaner-cspo-image.yaml

• actions/cache v4.2.0@1bd1e32a3bdc45362d1e726936510720a7c30a57
• ubuntu 24.04

.github/workflows/schedule-scan-image.yaml

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• ghcr.io/sovereigncloudstack/cspo-builder 0.1.5

.github/workflows/schedule-update-bot.yaml

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• docker/setup-buildx-action v3@6524bf65af31da8d45b59e8c27de4bd072b392f5
• actions/create-github-app-token v1@c1a285145b9d317df6ced56c09f525b5c2b6f755
• renovatebot/github-action v41.0.11@d385c88822a237acaead89c462fa0aef7502748f

.github/workflows/test.yaml

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683

gomod

go.mod

• go 1.22.0
• go 1.23.5
• github.com/SovereignCloudStack/cluster-stack-operator v0.1.0-alpha.8
• github.com/gophercloud/gophercloud/v2 v2.4.0
• github.com/gophercloud/utils/v2 v2.0.0-20250106080359-c8704d65b4fa@c8704d65b4fa
• github.com/onsi/ginkgo/v2 v2.22.2
• github.com/onsi/gomega v1.36.2
• github.com/stretchr/testify v1.10.0
• k8s.io/klog/v2 v2.130.1
• sigs.k8s.io/cluster-api-provider-openstack v0.11.4
• sigs.k8s.io/controller-runtime v0.18.7
• sigs.k8s.io/yaml v1.4.0

regex

images/builder/Dockerfile

• kubernetes-sigs/cluster-api v1.8.5
• golangci/golangci-lint v1.62.2
• kubernetes-sigs/kind v0.25.0
• kubernetes-sigs/kustomize extractVersion=^kustomize\/v(?<version>.+)$ v5.3.0
• aquasecurity/trivy v0.57.1
• kubernetes-sigs/controller-tools v0.16.5
• adrienverge/yamllint v1.35.1