Dependency Dashboard

[crossplane-renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Config Migration Needed

• Select this checkbox to let Renovate create an automated Config Migration PR.

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• chore(deps): update actions/create-github-app-token digest to fee1f7d (main)
• chore(deps): update actions/stale digest to eb5cf3a (main)
• chore(deps): update cachix/install-nix-action digest to 8aa0397 (main)
• chore(deps): update codecov/codecov-action digest to 75cd116 (main)
• chore(deps): update github/codeql-action digest to 7211b7c (main)
• chore(deps): update mheap/require-checklist-action digest to 9c8100a (main)
• fix(deps): update module github.com/google/go-containerregistry to v0.21.6 (main)
• fix(deps): update module github.com/kubernetes-sigs/kro to v0.9.2 (main)
• chore(deps): update korthout/backport-action action to v4.5.2 (main)
• chore(deps): update renovatebot/github-action action to v46.1.14 (main)
• fix(deps): update module github.com/alecthomas/kong to v1.15.0 (main)
• fix(deps): update module github.com/crossplane/function-sdk-go to v0.7.0 (main)
• fix(deps): update module github.com/docker/cli to v29.5.2+incompatible (main)
• fix(deps): update module github.com/docker/go-connections to v0.7.0 (main)
• fix(deps): update module github.com/emicklei/dot to v1.11.0 (main)
• fix(deps): update module github.com/getkin/kin-openapi to v0.139.0 (main)
• fix(deps): update module github.com/masterminds/semver/v3 to v3.5.0 (main)
• fix(deps): update module golang.org/x/mod to v0.36.0 (main)
• fix(deps): update module golang.org/x/text to v0.37.0 (main)
• fix(deps): update module golang.org/x/tools to v0.45.0 (main)
• fix(deps): update module google.golang.org/grpc to v1.81.1 (main)
• fix(deps): update module helm.sh/helm/v3 to v3.21.0 (main)
• chore(deps): update actions/create-github-app-token action to v3 (main)
• chore(deps): update actions/upload-artifact action to v7 (main)
• chore(deps): update cachix/cachix-action action to v17 (main)
• chore(deps): update codecov/codecov-action action to v6 (main)
• fix(deps): update module github.com/charmbracelet/bubbles to v2 (main)
• fix(deps): update module github.com/charmbracelet/bubbletea to v2 (main)
• fix(deps): update module github.com/charmbracelet/glamour to v2 (main)
• fix(deps): update module github.com/charmbracelet/lipgloss to v2 (main)
• fix(deps): update module github.com/posener/complete to v2 (main)
• fix(deps): update module helm.sh/helm/v3 to v4 (main)
• 🔐 Create all rate-limited PRs at once 🔐

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): update module github.com/containerd/containerd to v1.7.32 [security] (main)
• chore(deps): update module github.com/sigstore/cosign/v2 to v2.6.2 [security] (main)
• chore(deps): update module golang.org/x/crypto to v0.52.0 [security] (main)
• chore(deps): update module golang.org/x/net to v0.55.0 [security] (main)
• chore(deps): update module golang.org/x/sys to v0.44.0 [security] (main)
• fix(deps): update module github.com/go-git/go-billy/v5 to v5.9.0 [security] (main)
• fix(deps): update module github.com/go-git/go-git/v5 to v5.19.1 [security] (main)
• chore(deps): update module github.com/containerd/containerd to v1.7.32 [security] (release-2.3)
• chore(deps): update module github.com/sigstore/cosign/v2 to v2.6.2 [security] (release-2.3)
• chore(deps): update module golang.org/x/net to v0.55.0 [security] (release-2.3)
• fix(deps): update module github.com/go-git/go-billy/v5 to v5.9.0 [security] (release-2.3)
• fix(deps): update module github.com/go-git/go-git/v5 to v5.19.1 [security] (release-2.3)
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

Branch main

github-actions (8)

.github/workflows/backport.yml (3)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• korthout/backport-action v4.2.0@4aaf0e03a94ff0a619c9a511b61aeb42adea5b02 → [Updates: v4.5.2]
• ubuntu 24.04

.github/workflows/ci.yml (26)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• cachix/install-nix-action v31@4e002c8ec80594ecd40e759629461e26c8abed15 → [Updates: v31]
• cachix/cachix-action v16@3ba601ff5bbb07c7220846facfa2cd81eeee15a1 → [Updates: v17]
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• cachix/install-nix-action v31@4e002c8ec80594ecd40e759629461e26c8abed15 → [Updates: v31]
• cachix/cachix-action v16@3ba601ff5bbb07c7220846facfa2cd81eeee15a1 → [Updates: v17]
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• cachix/install-nix-action v31@4e002c8ec80594ecd40e759629461e26c8abed15 → [Updates: v31]
• cachix/cachix-action v16@3ba601ff5bbb07c7220846facfa2cd81eeee15a1 → [Updates: v17]
• nicknovitski/nix-develop v1@9be7cfb4b10451d3390a75dc18ad0465bed4932a
• github/codeql-action v4@45cbd0c69e560cd9e7cd7f8c32362050c9b7ded2 → [Updates: v4]
• github/codeql-action v4@45cbd0c69e560cd9e7cd7f8c32362050c9b7ded2 → [Updates: v4]
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• cachix/install-nix-action v31@4e002c8ec80594ecd40e759629461e26c8abed15 → [Updates: v31]
• cachix/cachix-action v16@3ba601ff5bbb07c7220846facfa2cd81eeee15a1 → [Updates: v17]
• codecov/codecov-action v5@671740ac38dd9b0130fbe1cec585b89eea48d3de → [Updates: v6, v5]
• jlumbroso/free-disk-space v1.3.1@54081f138730dfa15788a46383842cd2f914a1be
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• cachix/install-nix-action v31@4e002c8ec80594ecd40e759629461e26c8abed15 → [Updates: v31]
• cachix/cachix-action v16@3ba601ff5bbb07c7220846facfa2cd81eeee15a1 → [Updates: v17]
• actions/upload-artifact v6@b7c566a772e6b6bfb58ed0dc250532a479d7789f → [Updates: v7]
• ubuntu 24.04
• ubuntu 24.04
• ubuntu 24.04
• ubuntu 24.04
• ubuntu 24.04

.github/workflows/commands.yml (7)

• xt0rted/slash-command-action v2@bf51f8f5f4ea3d58abc7eca58f77104182b23e88
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• korthout/backport-action v4.2.0@4aaf0e03a94ff0a619c9a511b61aeb42adea5b02 → [Updates: v4.5.2]
• xt0rted/slash-command-action v2@bf51f8f5f4ea3d58abc7eca58f77104182b23e88
• actions-ecosystem/action-remove-labels v1@2ce5d41b4b6aa8503e285553f75ed56e0a40bae0
• ubuntu 24.04
• ubuntu 24.04

.github/workflows/pr.yml (2)

• mheap/require-checklist-action v2@46d2ca1a0f90144bd081fd13a80b1dc581759365 → [Updates: v2]
• ubuntu 24.04

.github/workflows/promote.yml (4)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• cachix/install-nix-action v31@4e002c8ec80594ecd40e759629461e26c8abed15 → [Updates: v31]
• cachix/cachix-action v16@3ba601ff5bbb07c7220846facfa2cd81eeee15a1 → [Updates: v17]
• ubuntu 24.04

.github/workflows/renovate.yml (3)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/create-github-app-token v2@29824e69f54612133e76f7eaac726eef6c875baf → [Updates: v3, v2]
• renovatebot/github-action v46.0.2@e23f4d9675532445118c886434f5a34292b630b4 → [Updates: v46.1.14]

.github/workflows/stale.yml (2)

• actions/stale v10@997185467fa4f803885201cee163a9f38240193d → [Updates: v10]
• ubuntu 24.04

.github/workflows/tag.yml (3)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• negz/create-tag v1@39bae1e0932567a58c20dea5a1a0d18358503320
• ubuntu 24.04

gomod (1)

go.mod (45)

• go 1.26.0
• dario.cat/mergo v1.0.2
• github.com/Masterminds/semver/v3 v3.4.0 → [Updates: v3.5.0]
• github.com/alecthomas/kong v1.14.0 → [Updates: v1.15.0]
• github.com/charmbracelet/bubbles v1.0.0 → [Updates: v2.1.0]
• github.com/charmbracelet/bubbletea v1.3.10 → [Updates: v2.0.6]
• github.com/charmbracelet/glamour v1.0.0 → [Updates: v2.0.0]
• github.com/charmbracelet/lipgloss v1.1.1-0.20250404203927-76690c660834@76690c660834 → [Updates: v2.0.3]
• github.com/charmbracelet/x/term v0.2.2
• github.com/containerd/errdefs v1.0.0
• github.com/crossplane/crossplane-runtime/v2 v2.4.0-rc.0
• github.com/crossplane/crossplane/apis/v2 v2.4.0-rc.0
• github.com/crossplane/function-sdk-go v0.6.1-0.20260506001521-78a3dd862da1@78a3dd862da1 → [Updates: v0.7.0]
• github.com/docker/cli v29.4.0+incompatible → [Updates: v29.5.2+incompatible]
• github.com/docker/docker v28.5.2+incompatible
• github.com/docker/go-connections v0.6.0 → [Updates: v0.7.0]
• github.com/emicklei/dot v1.10.0 → [Updates: v1.11.0]
• github.com/getkin/kin-openapi v0.137.0 → [Updates: v0.139.0]
• github.com/go-git/go-billy/v5 v5.8.0 → [Updates: v5.9.0]
• github.com/go-git/go-git/v5 v5.18.0 → [Updates: v5.19.1]
• github.com/gobuffalo/flect v1.0.3
• github.com/google/go-cmp v0.7.0
• github.com/google/go-containerregistry v0.21.2 → [Updates: v0.21.6]
• github.com/google/ko v0.18.1
• github.com/invopop/jsonschema v0.14.0
• github.com/kubernetes-sigs/kro v0.9.1 → [Updates: v0.9.2]
• github.com/muesli/termenv v0.16.0
• github.com/oapi-codegen/oapi-codegen/v2 v2.7.0
• github.com/pkg/errors v0.9.1
• github.com/posener/complete v1.2.3 → [Updates: v2.1.0]
• github.com/spf13/afero v1.15.0
• github.com/willabides/kongplete v0.4.0
• golang.org/x/mod v0.35.0 → [Updates: v0.36.0]
• golang.org/x/sync v0.20.0
• golang.org/x/text v0.36.0 → [Updates: v0.37.0]
• golang.org/x/tools v0.44.0 → [Updates: v0.45.0]
• google.golang.org/grpc v1.80.0 → [Updates: v1.81.1]
• google.golang.org/protobuf v1.36.11
• gopkg.in/yaml.v3 v3.0.1
• helm.sh/helm/v3 v3.20.2 → [Updates: v3.21.0, v4.2.0]
• github.com/containerd/containerd v1.7.30 → [Updates: v1.7.32]
• github.com/sigstore/cosign/v2 v2.6.1 → [Updates: v2.6.2]
• golang.org/x/crypto v0.50.0 → [Updates: v0.52.0]
• golang.org/x/net v0.53.0 → [Updates: v0.55.0]
• golang.org/x/sys v0.43.0 → [Updates: v0.44.0]

Branch release-2.3

github-actions (8)

.github/workflows/backport.yml

.github/workflows/ci.yml

.github/workflows/commands.yml

.github/workflows/pr.yml

.github/workflows/promote.yml

.github/workflows/renovate.yml

.github/workflows/stale.yml

.github/workflows/tag.yml

gomod (1)

go.mod (6)

• github.com/docker/docker v28.5.2+incompatible
• github.com/go-git/go-billy/v5 v5.8.0 → [Updates: v5.9.0]
• github.com/go-git/go-git/v5 v5.18.0 → [Updates: v5.19.1]
• github.com/containerd/containerd v1.7.30 → [Updates: v1.7.32]
• github.com/sigstore/cosign/v2 v2.6.1 → [Updates: v2.6.2]
• golang.org/x/net v0.54.0 → [Updates: v0.55.0]