Dependency Dashboard

[renovate-sh-app]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Abandoned Dependencies

Note

Packages are marked as abandoned when they exceed the abandonmentThreshold since their last release. Unlike deprecated packages with official notices, abandonment is detected by release inactivity.

These dependencies have not received updates for an extended period and may be unmaintained:

View abandoned dependencies (3)

Datasource	Name	Last Updated
gomod	github.com/golang/protobuf	2024-03-06
gomod	github.com/google/go-cmp	2025-01-14
gomod	github.com/google/gopacket	2020-10-19

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• chore(deps): update actions/checkout digest to 93cb6ef
• chore(deps): update actions/setup-go digest to 7a3fe6c
• chore(deps): update alpine:3.22 docker digest to 55ae5d2
• fix(deps): update github.com/grafana/sobek digest to d8d9202
• fix(deps): update module github.com/sirupsen/logrus to v1.9.4
• chore(deps): update alpine docker tag to v3.23
• chore(deps): update docker/login-action action to v3.7.0
• fix(deps): update module github.com/jhump/protoreflect to v1.18.0
• fix(deps): update module google.golang.org/grpc to v1.78.0
• fix(deps): update module sigs.k8s.io/kind to v0.31.0
• chore(deps): update actions/checkout action to v6
• chore(deps): update github artifact actions (major) (actions/download-artifact, actions/upload-artifact)
• chore(deps): update golangci/golangci-lint-action action to v9
• 🔐 Create all rate-limited PRs at once 🔐

Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

• chore(deps): update dependency windows to v2025

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): update module golang.org/x/crypto to v0.45.0 [security]
• chore(deps): update debian:trixie docker digest to 2c91e48
• chore(deps): update golang:1.25 docker digest to d2e5acc
• chore(deps): update grafana/k6 docker digest to a7c79af
• fix(deps): update module github.com/spf13/cobra to v1.10.2
• fix(deps): update module google.golang.org/protobuf to v1.36.11
• chore(deps): update docker/setup-buildx-action action to v3.12.0
• fix(deps): update kubernetes packages to v0.35.0 (k8s.io/api, k8s.io/apimachinery, k8s.io/client-go)
• fix(deps): update module go.k6.io/k6 to v1.5.0
• Click on this checkbox to rebase all open PRs at once

Vulnerabilities

Important

4/7 CVEs have Renovate fixes.

gomod

go.mod

github.com/docker/docker

• GHSA-6hwg-w5jg-9c6x
• GHSA-j249-ghv5-7mxv
• GHSA-qrqr-3x5j-2xw9

golang.org/x/crypto

• GO-2025-4134 (fixed in >= 0.45.0)
• GHSA-f6x5-jh6r-wrfv (fixed in >= 0.45.0)
• GHSA-j5w8-q4qc-rx2x (fixed in >= 0.45.0)
• GO-2025-4135 (fixed in >= 0.45.0)

Detected Dependencies

dockerfile (4)

images/agent/Dockerfile (1)

• alpine 3.22@sha256:4b7ce07002c69e8f3d704a9c5d6fd3053be500b7f1c69fc0d80990c2ad8dd412 → [Updates: 3.23, 3.22]

images/disruptor/Dockerfile (1)

• grafana/k6 sha256:290b029fa9f50fb9e5d007a0cb8d97984f71cd2a31e5a092349c284a3cfff2c2 → [Updates: undefined]

testcontainers/echoserver/Dockerfile (1)

• golang 1.25@sha256:8c945d3e25320e771326dafc6fb72ecae5f87b0f29328cbbd87c4dff506c9135 → [Updates: 1.25]

testcontainers/iperf3/Dockerfile (1)

• debian trixie@sha256:fd8f5a1df07b5195613e4b9a0b6a947d3772a151b81975db27d47f093f60c6e6 → [Updates: trixie]

github-actions (4)

.github/workflows/ci.yml (10)

• actions/checkout v5@08c6903cd8c0fde910a37f88322edcfb5dd907a8 → [Updates: v6, v5]
• actions/setup-go v6@44694675825211faa026b3c33043df3e48a5fa00 → [Updates: v6]
• actions/checkout v5@08c6903cd8c0fde910a37f88322edcfb5dd907a8 → [Updates: v6, v5]
• actions/checkout v5@08c6903cd8c0fde910a37f88322edcfb5dd907a8 → [Updates: v6, v5]
• actions/setup-go v6@44694675825211faa026b3c33043df3e48a5fa00 → [Updates: v6]
• actions/checkout v5@08c6903cd8c0fde910a37f88322edcfb5dd907a8 → [Updates: v6, v5]
• actions/setup-go v6@44694675825211faa026b3c33043df3e48a5fa00 → [Updates: v6]
• golangci/golangci-lint-action v6.5.2@55c2c1448f86e01eaae002a5a3a9624417608d84 → [Updates: v9.2.0]
• actions/checkout v5@08c6903cd8c0fde910a37f88322edcfb5dd907a8 → [Updates: v6, v5]
• codespell-project/actions-codespell v2.2@8f01853be192eb0f849a5c7d721450e7a467c579

.github/workflows/publish-techdocs.yaml (1)

• grafana/shared-workflows main

.github/workflows/publish.yml (15)

• actions/checkout v5@08c6903cd8c0fde910a37f88322edcfb5dd907a8 → [Updates: v6, v5]
• actions/setup-go v6@44694675825211faa026b3c33043df3e48a5fa00 → [Updates: v6]
• actions/upload-artifact v4@ea165f8d65b6e75b540449e92b4886f43607fa02 → [Updates: v6]
• actions/checkout v5@08c6903cd8c0fde910a37f88322edcfb5dd907a8 → [Updates: v6, v5]
• actions/download-artifact v5@634f93cb2916e3fdff6788551b99b062d0335ce0 → [Updates: v7]
• actions/upload-artifact v4@ea165f8d65b6e75b540449e92b4886f43607fa02 → [Updates: v6]
• actions/checkout v5@08c6903cd8c0fde910a37f88322edcfb5dd907a8 → [Updates: v6, v5]
• actions/download-artifact v5@634f93cb2916e3fdff6788551b99b062d0335ce0 → [Updates: v7]
• docker/setup-qemu-action v3.7.0@c7c53464625b32c7a7e944ae62b3e17d2b600130
• docker/setup-buildx-action v3.11.1@e468171a9de216ec08956ac3ada2f0791b6bd435 → [Updates: v3.12.0]
• docker/login-action v3.6.0@5e57cd118135c172c3672efd75eb46360885c0ef → [Updates: v3.7.0]
• actions/checkout v5@08c6903cd8c0fde910a37f88322edcfb5dd907a8 → [Updates: v6, v5]
• actions/download-artifact v5@634f93cb2916e3fdff6788551b99b062d0335ce0 → [Updates: v7]
• actions/download-artifact v5@634f93cb2916e3fdff6788551b99b062d0335ce0 → [Updates: v7]
• windows 2022 → [Updates: 2025]

.github/workflows/sync-core-deps.yaml (3)

• actions/checkout v5@08c6903cd8c0fde910a37f88322edcfb5dd907a8 → [Updates: v6, v5]
• actions/setup-go v6@44694675825211faa026b3c33043df3e48a5fa00 → [Updates: v6]
• go 1.21

gomod (1)

go.mod (22)

• go 1.24.0
• github.com/docker/docker v28.5.2+incompatible
• github.com/docker/go-connections v0.6.0
• github.com/florianl/go-nfqueue/v2 v2.0.2
• github.com/google/go-cmp v0.7.0
• github.com/google/gopacket v1.1.19
• github.com/grafana/sobek v0.0.0-20251113105955-976a34df9c09@976a34df9c09 → [Updates: v0.0.0-20251113105955-976a34df9c09]
• github.com/sirupsen/logrus v1.9.3 → [Updates: v1.9.4]
• github.com/spf13/cobra v1.10.1 → [Updates: v1.10.2]
• github.com/stretchr/testify v1.11.1
• github.com/testcontainers/testcontainers-go v0.40.0
• go.k6.io/k6 v1.3.0 → [Updates: v1.5.0]
• k8s.io/api v0.34.1 → [Updates: v0.35.0]
• k8s.io/apimachinery v0.34.1 → [Updates: v0.35.0]
• k8s.io/client-go v0.34.1 → [Updates: v0.35.0]
• sigs.k8s.io/kind v0.30.0 → [Updates: v0.31.0]
• golang.org/x/crypto v0.43.0 → [Updates: v0.45.0]
• github.com/golang/protobuf v1.5.4
• github.com/jhump/protoreflect v1.17.0 → [Updates: v1.18.0]
• github.com/testcontainers/testcontainers-go/modules/k3s v0.40.0
• google.golang.org/grpc v1.76.0 → [Updates: v1.78.0]
• google.golang.org/protobuf v1.36.10 → [Updates: v1.36.11]

---

Need help?

You can ask for more help in the following Slack channel: #proj-renovate-self-hosted. In that channel you can also find ADR and FAQ docs in the Resources section.