Dependency Dashboard

[renovate-sh-app]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Abandoned Dependencies

The following dependencies have not received updates for an extended period and may be unmaintained.

View abandoned dependencies (15)

[!NOTE]
Packages are marked as abandoned when they exceed the abandonmentThreshold since their last release. Unlike deprecated packages with official notices, abandonment is detected by release inactivity.

Datasource	Package	Last Updated
gomod	github.com/beorn7/perks	2019-07-31
gomod	github.com/cespare/xxhash/v2	2024-04-04
gomod	github.com/davecgh/go-spew	2018-02-21
gomod	github.com/go-kit/log	2022-04-27
gomod	github.com/hashicorp/errwrap	2020-07-14
gomod	github.com/hashicorp/go-immutable-radix	2023-11-21
gomod	github.com/hashicorp/go-multierror	2021-03-11
gomod	github.com/hashicorp/go-uuid	2022-04-08
gomod	github.com/hashicorp/golang-lru	2023-09-21
gomod	github.com/kr/text	2020-02-14
gomod	github.com/munnerz/goautoneg	2019-10-10
gomod	github.com/pmezard/go-difflib	2016-01-10
gomod	github.com/sean-/seed	2017-03-13
gomod	go.uber.org/atomic	2023-05-03
gomod	gopkg.in/yaml.v3	2022-05-27

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• chore(deps): update module github.com/armon/go-metrics to v0.6.1
• chore(deps): update module github.com/go-logfmt/logfmt to v0.6.1
• chore(deps): update module github.com/google/btree to v1.1.3
• chore(deps): update module github.com/hashicorp/errwrap to v1.1.0
• chore(deps): update module github.com/hashicorp/go-immutable-radix to v1.3.1
• chore(deps): update module github.com/hashicorp/go-metrics to v0.6.1
• chore(deps): update module github.com/hashicorp/golang-lru to v0.6.0
• chore(deps): update module github.com/prometheus/common to v0.70.1
• chore(deps): update module github.com/prometheus/procfs to v0.21.1
• fix(deps): update module github.com/hashicorp/memberlist to v0.6.0
• fix(deps): update module github.com/prometheus/client_golang to v1.24.1
• chore(deps): update actions/setup-go action to v7
• chore(deps): update module github.com/hashicorp/go-immutable-radix to v2
• chore(deps): update module github.com/hashicorp/golang-lru to v2
• chore(deps): update module go.yaml.in/yaml/v2 to v3
• 🔐 Create all rate-limited PRs at once 🔐

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• fix(security/unknown/): update module golang.org/x/crypto to v0.52.0 [security]
• fix(security/unknown/): update module golang.org/x/net to v0.56.0 [security]
• fix(security/unknown/): update module golang.org/x/sys to v0.44.0 [security]
• fix(security/unknown/): update module golang.org/x/text to v0.39.0 [security]
• chore(deps): update actions/checkout digest to d23441a
• chore(deps): update actions/setup-go digest to 924ae3a
• chore(deps): update module github.com/hashicorp/go-sockaddr to v1.0.7
• chore(deps): update module github.com/hashicorp/go-uuid to v1.0.3
• chore(deps): update module github.com/miekg/dns to v1.1.72
• chore(deps): update module go.yaml.in/yaml/v2 to v2.4.4
• chore(deps): update module google.golang.org/protobuf to v1.36.12
• chore(deps): update actions/checkout action to v7
• Click on this checkbox to rebase all open PRs at once

Vulnerabilities

Important

38/39 CVEs have Renovate fixes.

gomod

go.mod

golang.org/x/net

• GHSA-5cv4-jp36-h3mw (fixed in >= 0.55.0)
• GO-2026-4559 (fixed in >= 0.51.0)
• GO-2026-4918 (fixed in >= 0.53.0)
• GO-2026-5025 (fixed in >= 0.55.0)
• GO-2026-5026 (fixed in >= 0.55.0)
• GO-2026-5027 (fixed in >= 0.55.0)
• GO-2026-5028 (fixed in >= 0.55.0)
• GO-2026-5029 (fixed in >= 0.55.0)
• GO-2026-5030 (fixed in >= 0.55.0)
• GO-2026-5942 (fixed in >= 0.56.0)

golang.org/x/crypto

• GHSA-45gg-vh54-h5m9 (fixed in >= 0.52.0)
• GHSA-5cgq-3rg8-m6cv (fixed in >= 0.52.0)
• GHSA-78mq-xcr3-xm33 (fixed in >= 0.52.0)
• GHSA-89gr-r52h-f8rx (fixed in >= 0.52.0)
• GHSA-9m57-25v3-79x9 (fixed in >= 0.52.0)
• GHSA-f5wc-c3c7-36mc (fixed in >= 0.52.0)
• GHSA-jppx-rxg9-jmrx (fixed in >= 0.52.0)
• GHSA-q4h4-gmj2-qvw2 (fixed in >= 0.52.0)
• GHSA-qpw4-5x99-6vjp (fixed in >= 0.52.0)
• GHSA-rm3j-f69w-wqmq (fixed in >= 0.52.0)
• GHSA-vgwf-h737-ff37 (fixed in >= 0.52.0)
• GHSA-w879-237q-wc7r (fixed in >= 0.52.0)
• GHSA-x527-x647-q7gg (fixed in >= 0.52.0)
• GO-2026-5005 (fixed in >= 0.52.0)
• GO-2026-5006 (fixed in >= 0.52.0)
• GO-2026-5013 (fixed in >= 0.52.0)
• GO-2026-5014 (fixed in >= 0.52.0)
• GO-2026-5015 (fixed in >= 0.52.0)
• GO-2026-5016 (fixed in >= 0.52.0)
• GO-2026-5017 (fixed in >= 0.52.0)
• GO-2026-5018 (fixed in >= 0.52.0)
• GO-2026-5019 (fixed in >= 0.52.0)
• GO-2026-5020 (fixed in >= 0.52.0)
• GO-2026-5021 (fixed in >= 0.52.0)
• GO-2026-5023 (fixed in >= 0.52.0)
• GO-2026-5033 (fixed in >= 0.52.0)
• GO-2026-5932

golang.org/x/sys

• GO-2026-5024 (fixed in >= 0.44.0)

golang.org/x/text

• GO-2026-5970 (fixed in >= 0.39.0)

Detected Dependencies

github-actions (1)

.github/workflows/test.yml (9)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v7, v6]
• actions/setup-go v6@4b73464bb391d4059bd26b0524d20df3927bd417 → [Updates: v7, v6]
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v7, v6]
• actions/setup-go v6@4b73464bb391d4059bd26b0524d20df3927bd417 → [Updates: v7, v6]
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v7, v6]
• actions/setup-go v6@4b73464bb391d4059bd26b0524d20df3927bd417 → [Updates: v7, v6]
• go 1.24
• go 1.24
• go 1.24

gomod (1)

go.mod (35)

• go 1.24.0
• github.com/cespare/xxhash/v2 v2.3.0
• github.com/go-kit/log v0.2.1
• github.com/hashicorp/go-msgpack/v2 v2.1.5
• github.com/hashicorp/go-multierror v1.1.1
• github.com/hashicorp/memberlist v0.5.3 → [Updates: v0.6.0]
• github.com/prometheus/client_golang v1.23.2 → [Updates: v1.24.1]
• github.com/stretchr/testify v1.11.1
• go.uber.org/atomic v1.11.0
• golang.org/x/net v0.50.0 → [Updates: v0.56.0]
• github.com/armon/go-metrics v0.4.1 → [Updates: v0.6.1]
• github.com/beorn7/perks v1.0.1
• github.com/davecgh/go-spew v1.1.1
• github.com/go-logfmt/logfmt v0.5.1 → [Updates: v0.6.1]
• github.com/google/btree v1.0.0 → [Updates: v1.1.3]
• github.com/hashicorp/errwrap v1.0.0 → [Updates: v1.1.0]
• github.com/hashicorp/go-immutable-radix v1.0.0 → [Updates: v1.3.1, v2.1.0]
• github.com/hashicorp/go-metrics v0.5.4 → [Updates: v0.6.1]
• github.com/hashicorp/go-sockaddr v1.0.0 → [Updates: v1.0.7]
• github.com/hashicorp/go-uuid v1.0.1 → [Updates: v1.0.3]
• github.com/hashicorp/golang-lru v0.5.1 → [Updates: v0.6.0, v2.0.7]
• github.com/kr/text v0.2.0
• github.com/miekg/dns v1.1.26 → [Updates: v1.1.72]
• github.com/munnerz/goautoneg v0.0.0-20191010083416-a7dc8b61c822@a7dc8b61c822
• github.com/pmezard/go-difflib v1.0.0
• github.com/prometheus/client_model v0.6.2
• github.com/prometheus/common v0.66.1 → [Updates: v0.70.1]
• github.com/prometheus/procfs v0.16.1 → [Updates: v0.21.1]
• github.com/sean-/seed v0.0.0-20170313163322-e2103e2c3529@e2103e2c3529
• go.yaml.in/yaml/v2 v2.4.2 → [Updates: v2.4.4, v3.0.5]
• golang.org/x/crypto v0.48.0 → [Updates: v0.52.0]
• golang.org/x/sys v0.41.0 → [Updates: v0.44.0]
• golang.org/x/text v0.34.0 → [Updates: v0.39.0]
• google.golang.org/protobuf v1.36.8 → [Updates: v1.36.12]
• gopkg.in/yaml.v3 v3.0.1

---

Need help?

You can ask for more help in the following Slack channel: #proj-renovate-self-hosted. In that channel you can also find ADR and FAQ docs in the Resources section.