Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

• Pin dependencies (gcr.io/distroless/static, sapcc/maintenance-controller)

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• Renovate: Update module github.com/slack-go/slack to v0.23.1 [SECURITY]
• Pin dependencies
• Renovate: Update External dependencies (github.com/onsi/ginkgo/v2, github.com/onsi/gomega, github.com/vmware/govmomi, gopkg.in/ini.v1)
• Renovate: Update docker/build-push-action action to v7
• Renovate: Update docker/login-action action to v4
• Renovate: Update docker/metadata-action action to v6
• Click on this checkbox to rebase all open PRs at once

Vulnerabilities

Important

1/1 CVEs have Renovate fixes.

gomod

go.mod

github.com/slack-go/slack

• GHSA-gxhx-2686-5h9g (fixed in >= 0.23.1)

Detected Dependencies

dockerfile (1)

Dockerfile (2)

• golang 1.26-alpine → [Updates: 1.26-alpine]
• gcr.io/distroless/static nonroot → [Updates: nonroot]

github-actions (5)

.github/workflows/build_container.yaml (4)

• actions/checkout v6
• docker/login-action v3 → [Updates: v4]
• docker/metadata-action v5 → [Updates: v6]
• docker/build-push-action v6 → [Updates: v7]

.github/workflows/checks.yaml

.github/workflows/ci.yaml

.github/workflows/codeql.yaml

.github/workflows/container-registry-ghcr.yaml

gomod (1)

go.mod (23)

• go 1.26.0
• github.com/PaesslerAG/gval v1.2.4
• github.com/blang/semver/v4 v4.0.0
• github.com/cobaltcore-dev/openstack-hypervisor-operator v1.2.3
• github.com/elastic/go-ucfg v0.9.1
• github.com/go-logr/logr v1.4.3
• github.com/gophercloud/gophercloud/v2 v2.12.0
• github.com/onsi/ginkgo/v2 v2.29.0 → [Updates: v2.31.0]
• github.com/onsi/gomega v1.41.0 → [Updates: v1.42.0]
• github.com/prometheus/client_golang v1.23.2
• github.com/prometheus/common v0.68.1
• github.com/sapcc/go-bits v0.0.0-20260611141223-328f49772fed@328f49772fed
• github.com/sapcc/ucfgwrap v0.0.0-20221123134804-375b5fb88359@375b5fb88359
• github.com/slack-go/slack v0.17.3 → [Updates: v0.23.1]
• github.com/vmware/govmomi v0.52.0 → [Updates: v0.54.1]
• go.uber.org/zap v1.28.0
• gopkg.in/ini.v1 v1.67.1 → [Updates: v1.67.3]
• k8s.io/api v0.36.0
• k8s.io/apimachinery v0.36.0
• k8s.io/client-go v0.36.0
• k8s.io/klog/v2 v2.140.0
• k8s.io/utils v0.0.0-20260507154919-ff6756f316d2@ff6756f316d2
• sigs.k8s.io/controller-runtime v0.24.1

helm-values (1)

e2e/values.yaml (1)

• ccloud/flatcar-linux-update-operator 9b00307910f2930c9cddde22246d417e7d2fe346

kustomize (1)

config/manager/kustomization.yaml (1)

• sapcc/maintenance-controller unknown version → [Updates: undefined]

renovate-config (1)

.github/renovate.json

---

• Check this box to trigger a request for Renovate to run again on this repository