Dependency Dashboard

[renovate-sh-app]

ℹ️ Note

This PR body was truncated due to platform limits.

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Repository Problems

Renovate tried to run on this repository, but found these problems.

• ⚠️ WARN: Error obtaining docker token
• ⚠️ WARN: No docker auth found - returning
• ⚠️ WARN: GitHub failure: secondary rate limit
• ⚠️ WARN: Package lookup failures
• ⚠️ WARN: Error updating branch: update failure

Abandoned Dependencies

The following dependencies have not received updates for an extended period and may be unmaintained.

View abandoned dependencies (175)

[!NOTE]
Packages are marked as abandoned when they exceed the abandonmentThreshold since their last release. Unlike deprecated packages with official notices, abandonment is detected by release inactivity.

Datasource	Package	Last Updated
bundler	fluent-plugin-multi-format-parser	2023-11-29
gomod	github.com/DmitriyVTitov/size	2022-04-11
gomod	github.com/MasslessParticle/azure-storage-blob-go	2021-07-02
gomod	github.com/Masterminds/goutils	2021-02-04
gomod	github.com/NYTimes/gziphandler	2019-02-21
gomod	github.com/ViaQ/logerr/v2	2022-06-10
gomod	github.com/alecthomas/kingpin/v2	2023-09-30
gomod	github.com/aliyun/aliyun-oss-go-sdk	2023-12-28
gomod	github.com/antlr4-go/antlr/v4	2024-05-15
gomod	github.com/atotto/clipboard	2021-02-24
gomod	github.com/bboreham/go-loser	2023-09-20
gomod	github.com/beorn7/perks	2019-07-31
gomod	github.com/blang/semver/v4	2020-05-24
gomod	github.com/c2h5oh/datasize	2023-12-15
gomod	github.com/cespare/xxhash/v2	2024-04-04
gomod	github.com/containerd/fifo	2023-02-17
gomod	github.com/containerd/log	2023-09-09
gomod	github.com/coreos/go-semver	2023-01-16
gomod	github.com/coreos/go-systemd	2019-11-04
gomod	github.com/cristalhq/hedgedhttp	2023-09-15
gomod	github.com/d4l3k/messagediff	2017-08-07
gomod	github.com/davecgh/go-spew	2018-02-21
gomod	github.com/dennwc/varint	2019-06-16
gomod	github.com/dgryski/go-rendezvous	2020-08-23
gomod	github.com/distribution/reference	2024-03-20
gomod	github.com/docker/go-metrics	2019-08-28
gomod	github.com/docker/go-plugins-helpers	2024-07-01
gomod	github.com/docker/go-units	2022-05-17
gomod	github.com/dolthub/maphash	2023-04-03
gomod	github.com/dolthub/swiss	2023-08-28
gomod	github.com/drone/envsubst	2021-06-16
gomod	github.com/dustin/go-humanize	2023-01-10
gomod	github.com/facette/natsort	2018-12-10
gomod	github.com/go-kit/log	2022-04-27
gomod	github.com/go-logr/stdr	2021-12-14
gomod	github.com/go-ole/go-ole	2023-08-04
gomod	github.com/go-playground/locales	2023-01-05
gomod	github.com/go-playground/universal-translator	2023-01-30
gomod	github.com/gobwas/glob	2018-02-08
gomod	github.com/gogo/googleapis	2021-03-10
gomod	github.com/gogo/protobuf	2021-01-10
gomod	github.com/gogo/status	2022-04-23
gomod	github.com/golang/protobuf	2024-03-06
gomod	github.com/golang/snappy	2023-12-25
gomod	github.com/google/gofuzz	2020-08-04
gomod	github.com/google/uuid	2024-01-23
gomod	github.com/gorilla/mux	2023-10-18
gomod	github.com/gorilla/websocket	2024-06-14
gomod	github.com/grafana/memberlist	2021-11-12
gomod	github.com/hashicorp/errwrap	2020-07-14
gomod	github.com/hashicorp/go-cleanhttp	2021-02-03
gomod	github.com/hashicorp/go-hclog	2024-04-01
gomod	github.com/hashicorp/go-immutable-radix	2023-11-21
gomod	github.com/hashicorp/go-multierror	2021-03-11
gomod	github.com/hashicorp/go-rootcerts	2019-12-10
gomod	github.com/hashicorp/golang-lru	2023-09-21
gomod	github.com/hashicorp/golang-lru/v2	2023-09-21
gomod	github.com/huandu/xstrings	2024-06-06
gomod	github.com/inconshreveable/mousetrap	2022-11-27
gomod	github.com/influxdata/tdigest	2019-10-30
gomod	github.com/jmespath/go-jmespath	2020-09-18
gomod	github.com/joshdk/go-junit	2021-02-26
gomod	github.com/jpillora/backoff	2019-10-03
gomod	github.com/json-iterator/go	2021-09-11
gomod	github.com/klauspost/pgzip	2022-09-30
gomod	github.com/kylelemons/godebug	2019-05-05
gomod	github.com/mattn/go-ieproxy	2024-05-22
gomod	github.com/mfridman/interpolate	2023-12-22
gomod	github.com/minio/md5-simd	2021-01-07
gomod	github.com/mitchellh/colorstring	2019-02-13
gomod	github.com/mitchellh/copystructure	2021-05-05
gomod	github.com/mitchellh/go-homedir	2019-01-27
gomod	github.com/mitchellh/go-wordwrap	2020-09-25
gomod	github.com/mitchellh/mapstructure	2022-04-20
gomod	github.com/mitchellh/reflectwalk	2021-05-03
gomod	github.com/moby/docker-image-spec	2024-02-09
gomod	github.com/moby/sys/userns	2024-08-07
gomod	github.com/modern-go/concurrent	2018-03-06
gomod	github.com/modern-go/reflect2	2021-09-11
gomod	github.com/muesli/cancelreader	2022-06-22
gomod	github.com/munnerz/goautoneg	2019-10-10
gomod	github.com/mwitkow/go-conntrack	2019-07-16
gomod	github.com/opencontainers/go-digest	2020-05-14
gomod	github.com/opentracing/opentracing-go	2020-07-01
gomod	github.com/pkg/browser	2024-01-02
gomod	github.com/pkg/errors	2020-01-14
gomod	github.com/planetscale/vtprotobuf	2024-01-29
gomod	github.com/pmezard/go-difflib	2016-01-10
gomod	github.com/remyoudompheng/bigfft	2023-01-29
gomod	github.com/richardartoul/molecule	2021-12-17
gomod	github.com/rivo/uniseg	2024-02-08
gomod	github.com/sean-/seed	2017-03-13
gomod	github.com/segmentio/fasthash	2020-05-27
gomod	github.com/shopspring/decimal	2024-04-12
gomod	github.com/uber/jaeger-client-go	2021-12-07
gomod	github.com/uber/jaeger-lib	2021-03-29
gomod	github.com/x448/float16	2020-01-17
gomod	github.com/xhit/go-str2duration/v2	2022-12-07
gomod	github.com/xo/terminfo	2022-09-10
gomod	github.com/yusufpapurcu/wmi	2024-01-28
gomod	github.com/zeebo/assert	2022-07-21
gomod	go.opentelemetry.io/otel/exporters/jaeger	2023-08-28
gomod	go.uber.org/atomic	2023-05-03
gomod	go.uber.org/goleak	2023-10-24
gomod	go.uber.org/multierr	2023-03-29
gomod	go4.org/netipx	2023-11-29
gomod	gopkg.in/inf.v0	2018-03-26
gomod	gopkg.in/yaml.v2	2022-05-27
gomod	gopkg.in/yaml.v3	2022-05-27
gomod	gotest.tools	2018-11-11

Errored

The following updates encountered an error and will be retried. To force a retry now, click on a checkbox below.

• chore(deps): Pin dependencies (main) (actions/checkout, actions/setup-go, apache/kafka, confluentinc/cp-kafka, confluentinc/cp-zookeeper, fluent/fluentd, gcr.io/distroless/base-nossl, gcr.io/distroless/static, github.com/grafana/grafonnet-lib/grafonnet, github.com/grafana/jsonnet-libs/consul, github.com/grafana/jsonnet-libs/enterprise-metrics, github.com/grafana/jsonnet-libs/grafana, github.com/grafana/jsonnet-libs/grafana-builder, github.com/grafana/jsonnet-libs/jaeger-agent-mixin, github.com/grafana/jsonnet-libs/ksonnet-util, github.com/grafana/jsonnet-libs/memcached, github.com/grafana/jsonnet-libs/mixin-utils, github.com/grafana/jsonnet-libs/tanka-util, github.com/grafana/loki/production/ksonnet/loki, github.com/grafana/loki/production/loki-mixin, github.com/grafana/mimir/operations/mimir-mixin, github.com/jsonnet-libs/k8s-libsonnet/1.18, github.com/jsonnet-libs/k8s-libsonnet/1.20, github.com/prometheus-operator/kube-prometheus/jsonnet/kube-prometheus/lib, golang, golangci/golangci-lint, grafana/alloy, grafana/docs-base, grafana/grafana, grafana/grafana-enterprise, grafana/loki, grafana/promtail, grafana/writers-toolkit, hashicorp/consul, helm, mingrammer/flog, minio/minio, nginx, nixpkgs, nixpkgs-unstable, pgsty/mc, pgsty/minio, prom/prometheus, provectuslabs/kafka-ui, theperiklis/log-generator, theperiklis/loki, wurstmeister/kafka, wurstmeister/zookeeper)

PR Edited (Blocked)

The following updates have been manually edited so Renovate will no longer make changes. To discard all commits and start over, click on a checkbox below.

• fix(security/UNKNOWN/operator/api/loki): Update module golang.org/x/net to v0.56.0 [SECURITY] (main)
• fix(security/UNKNOWN/operator/api/loki): Update module golang.org/x/text to v0.39.0 [SECURITY] (main)
• chore(deps): Update operator/website/themes/doks digest to 4370737 (main)

Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

• chore(deps): Update github.com/charmbracelet/ultraviolet digest to 402eeaa (main)
• chore(deps): Update google.golang.org/genproto digest to c8921c7 (main)
• chore(deps): Update google.golang.org/genproto/googleapis/api digest to c8921c7 (main)
• fix(deps): Update github.com/thanos-io/objstore digest to 9ad2de9 (main)
• fix(deps): Update google.golang.org/genproto/googleapis/rpc digest to c8921c7 (main)
• chore(deps): Update dependency github.com/grafana/loki/production/loki-mixin to v3.7.6 (main)
• chore(deps): Update fluxcd/flux2 action to v2.9.4 (main)
• chore(deps): Update module github.com/knadh/koanf/maps to v0.1.3 (main)
• fix(deps): Update module github.com/aws/smithy-go to v1.27.7 (main)
• chore(deps): Update github.com/go-openapi/analysis (main) (github.com/go-openapi/analysis, github.com/go-openapi/validate)
• chore(deps): Update module cloud.google.com/go/auth to v0.23.0 (main)
• chore(deps): Update module cloud.google.com/go/iam to v1.13.0 (main)
• chore(deps): Update module github.com/dlclark/regexp2/v2 to v2.6.0 (main)
• chore(deps): Update module github.com/jaegertracing/jaeger-idl to v0.10.0 (main)
• chore(deps): Update module github.com/oschwald/maxminddb-golang/v2 to v2.5.0 (main)
• fix(deps): Update module github.com/oschwald/geoip2-golang/v2 to v2.3.0 (main)
• chore(deps): Update nix to nixos-26.05 (main)

---

Warning

Renovate failed to look up the following dependencies: Could not determine new digest for update (github-tags package anthropics/claude-code-action), Could not determine new digest for update (github-tags package golangci/golangci-lint-action), Could not determine new digest for update (github-tags package grafana/shared-workflows), Failed to look up github-digest package grafana/security-github-actions: no-result.

Files affected: .github/workflows/claude-code-review.yml, .github/workflows/claude.yml, .github/workflows/operator.yaml, .github/workflows/relyance.yml, .github/workflows/snyk.yml

---

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• fix(security/UNKNOWN/operator): Update go toolchain directive to v1.26.5 [SECURITY] (main)
• fix(security/MEDIUM/operator): Update module github.com/google/cel-go to v0.29.0 [SECURITY] (main)
• fix(security/UNKNOWN/operator): Update module go.opentelemetry.io/otel to v1.44.0 [SECURITY] (main)
• fix(security/UNKNOWN/operator): Update module google.golang.org/grpc to v1.82.1 [SECURITY] (main)
• chore(deps): Update actions/checkout digest to d23441a (main)
• chore(deps): Update github.com/grafana/objstore digest to ec72e5a (main)
• chore(deps): Update github.com/Microsoft/go-winio digest to 7561016 (main)
• chore(deps): Update github.com/planetscale/vtprotobuf digest to 8ae5a48 (main)
• chore(deps): Update golang:1.26.5 Docker digest to 2005724 (main)
• chore(deps): Update logstash:9.4.4 Docker digest to 1917188 (main)
• chore(deps): Update ruby:4.0.6 Docker digest to c400c1e (main)
• fix(deps): Update github.com/grafana/dskit digest to 601b98d (main)
• fix(deps): Update github.com/prometheus/prometheus digest to 06c4122 (main)
• fix(deps): Update github.com/twmb/franz-go/pkg/kfake digest to adb3a18 (main)
• fix(deps): Update google.golang.org/protobuf digest to 644d026 (main)
• chore(deps): Update dependency helm to v4.2.3 (main)
• chore(deps): Update Helm release rollout-operator to v0.50.1 (main)
• chore(deps): Update module go.opentelemetry.io/contrib/samplers/jaegerremote to v0.37.2 (main)
• fix(deps): Update module github.com/tjhop/slog-gokit to v0.2.2 (main)
• fix(deps): Update module github.com/twmb/franz-go to v1.21.5 (main)
• chore(deps): Update golangci/golangci-lint-action action to v9.3.0 (main)
• chore(deps): Update module github.com/armon/go-metrics to v0.6.1 (main)
• chore(deps): Update module github.com/grpc-ecosystem/grpc-gateway/v2 to v2.30.0 (main)
• chore(deps): Update module go.etcd.io/etcd/api/v3 to v3.7.1 (main)
• chore(deps): Update module go.etcd.io/etcd/client/pkg/v3 to v3.7.1 (main)
• chore(deps): Update module go.etcd.io/etcd/client/v3 to v3.7.1 (main)
• chore(deps): Update module go.opentelemetry.io/contrib/bridges/prometheus to v0.70.0 (main)
• chore(deps): Update module go.opentelemetry.io/contrib/detectors/gcp to v1.45.0 (main)
• chore(deps): Update module go.opentelemetry.io/contrib/exporters/autoexport to v0.70.0 (main)
• chore(deps): Update module go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc to v0.21.0 (main)
• chore(deps): Update module go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp to v0.21.0 (main)
• chore(deps): Update module go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc to v1.45.0 (main)
• chore(deps): Update module go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp to v1.45.0 (main)
• chore(deps): Update module go.opentelemetry.io/otel/exporters/otlp/otlptrace to v1.45.0 (main)
• chore(deps): Update module go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc to v1.45.0 (main)
• chore(deps): Update module go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp to v1.45.0 (main)
• chore(deps): Update module go.opentelemetry.io/otel/exporters/prometheus to v0.67.0 (main)
• chore(deps): Update module go.opentelemetry.io/otel/exporters/stdout/stdoutlog to v0.21.0 (main)
• chore(deps): Update module go.opentelemetry.io/otel/exporters/stdout/stdoutmetric to v1.45.0 (main)
• chore(deps): Update module go.opentelemetry.io/otel/exporters/stdout/stdouttrace to v1.45.0 (main)
• chore(deps): Update module go.opentelemetry.io/otel/log to v0.21.0 (main)
• chore(deps): Update module go.opentelemetry.io/otel/sdk/log to v0.21.0 (main)
• chore(deps): Update module go.opentelemetry.io/otel/sdk/metric to v1.45.0 (main)
• chore(deps): Update module modernc.org/libc to v1.75.1 (main)
• chore(deps): Update Terraform google to v7.43.0 (main)
• fix(deps): Update module github.com/aws/aws-sdk-go-v2/service/s3 to v1.107.0 (main)
• fix(deps): Update module github.com/IBM/ibm-cos-sdk-go to v1.15.0 (main)
• fix(deps): Update module github.com/redis/go-redis/v9 to v9.22.0 (main)
• fix(deps): Update module go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc to v0.70.0 (main)
• fix(deps): Update module go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace to v0.70.0 (main)
• fix(deps): Update module go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp to v0.70.0 (main)
• fix(deps): Update module go.opentelemetry.io/otel/sdk to v1.45.0 (main)
• chore(deps): Update actions/checkout action to v7 (main)
• chore(deps): Update actions/labeler action to v7 (main)
• chore(deps): Update actions/setup-go action to v7 (main)
• chore(deps): Update module github.com/cenkalti/backoff/v5 to v7 (main)
• chore(deps): Update module github.com/hashicorp/consul/api to v2 (main)
• chore(deps): Update module github.com/hashicorp/go-immutable-radix to v2 (main)
• chore(deps): Update module github.com/hashicorp/golang-lru to v2 (main)
• chore(deps): Update module github.com/ncw/swift to v2 (main)
• chore(deps): Update module go.yaml.in/yaml/v2 to v3 (main)
• chore(deps): Update module gopkg.in/yaml.v2 to v3 (main)
• chore(deps): Update module modernc.org/libc to v2 (main)
• fix(deps): Update module github.com/twmb/franz-go/pkg/kmsg to v2 (main)
• fix(deps): Lock file maintenance (main)
• fix(security/UNKNOWN/pkg/push): Update module golang.org/x/net to v0.56.0 [SECURITY] (release-3.7.x)
• fix(security/UNKNOWN/pkg/push): Update module golang.org/x/text to v0.39.0 [SECURITY] (release-3.7.x)
• fix(security/UNKNOWN/pkg/push): Update module google.golang.org/grpc to v1.82.1 [SECURITY] (release-3.7.x)
• Click on this checkbox to rebase all open PRs at once

Vulnerabilities

Important

22/24 CVEs have Renovate fixes.

gomod

go.mod

golang.org/x/crypto

• GO-2026-5932

operator/api/loki/go.mod

golang.org/x/net

• GHSA-5cv4-jp36-h3mw (fixed in >= 0.55.0)
• GHSA-qxp5-gwg8-xv66 (fixed in >= 0.36.0)
• GHSA-vvgc-356p-c3xw (fixed in >= 0.38.0)
• GO-2025-3503 (fixed in >= 0.36.0)
• GO-2025-3595 (fixed in >= 0.38.0)
• GO-2026-4440 (fixed in >= 0.45.0)
• GO-2026-4441 (fixed in >= 0.45.0)
• GO-2026-4918 (fixed in >= 0.53.0)
• GO-2026-5025 (fixed in >= 0.55.0)
• GO-2026-5026 (fixed in >= 0.55.0)
• GO-2026-5027 (fixed in >= 0.55.0)
• GO-2026-5028 (fixed in >= 0.55.0)
• GO-2026-5029 (fixed in >= 0.55.0)
• GO-2026-5030 (fixed in >= 0.55.0)
• GO-2026-5942 (fixed in >= 0.56.0)

golang.org/x/text

• GO-2026-5970 (fixed in >= 0.39.0)

operator/go.mod

go

• GO-2026-4970 (fixed in >= 1.26.5)
• GO-2026-5856 (fixed in >= 1.26.5)

github.com/google/cel-go

• GHSA-gcjh-h69q-9w9g (fixed in >= 0.29.0)

go.opentelemetry.io/otel

• GO-2026-5158 (fixed in >= 1.44.0)

golang.org/x/crypto

• GO-2026-5932

google.golang.org/grpc

• GHSA-hrxh-6v49-42gf (fixed in >= 1.82.1)
• GO-2026-6061 (fixed in >= 1.82.1)

Detected Dependencies

Note

Detected dependencies section has been truncated

bundler (3)

clients/cmd/fluentd/docker/Gemfile (2)

• fluentd '1.19.3'
• fluent-plugin-multi-format-parser '~>1.1.0'

clients/cmd/fluentd/Gemfile

clients/cmd/logstash/Gemfile (1)

• webmock "~> 3.8"

devcontainer (1)

.devcontainer/devcontainer.json (1)

• grafana/loki-build-image 0.35.2

docker-compose (15)

clients/cmd/docker-driver/docker-compose.yaml (1)

• grafana/grafana unknown version → [Updates: undefined]

clients/cmd/fluentd/docker/docker-compose.yml (1)

• fluent/fluent-bit 5.1@sha256:bf09d620b6b45c080b4da86ac5d98fd3739c1213a148f93dec884fdcc64084cb

cmd/logql-analyzer/docker-compose.yaml (1)

• grafana/docs-base latest → [Updates: latest]

debug/docker-compose.yaml (3)

• grafana/loki-debug latest
• grafana/promtail-debug latest
• grafana/grafana master → [Updates: master]

examples/getting-started/docker-compose.yaml (8)

• grafana/loki latest → [Updates: latest]
• grafana/loki latest → [Updates: latest]
• grafana/alloy latest → [Updates: latest]
• minio/minio unknown version → [Updates: undefined]
• grafana/grafana latest → [Updates: latest]
• grafana/loki latest → [Updates: latest]
• nginx latest → [Updates: latest]
• mingrammer/flog unknown version → [Updates: undefined]

examples/ha-monolithic/docker-compose.yaml (4)

• pgsty/minio latest → [Updates: latest]
• pgsty/mc latest → [Updates: latest]
• nginx alpine → [Updates: alpine]
• grafana/loki 3.7.6@sha256:efd47c67f9bac88ca29bcf8cb997d9ab29d1848bd0aff579282295542a745952

production/docker/docker-compose.yaml (8)

• grafana/grafana 13.1.3@sha256:ab5cb380e3ff3172d6c8bd2e7cfd31cce977d2881b260e1f5bc089bf0b759b43
• prom/prometheus v3.13.2@sha256:508729e0e2d18e11fd742a5a5ca70e557b940a93948c3c95fd0123a6fd538b69
• mingrammer/flog unknown version → [Updates: undefined]
• grafana/promtail latest → [Updates: latest]
• minio/minio unknown version → [Updates: undefined]
• nginx latest → [Updates: latest]
• prom/alertmanager v0.33.1@sha256:9e082985f56f4c8c9f724e18f2288c6708f472e56a5286b8863d080434ea065d
• grafana/loki 3.7.6@sha256:efd47c67f9bac88ca29bcf8cb997d9ab29d1848bd0aff579282295542a745952

tools/dev/kafka/docker-compose.yaml (5)

• grafana/grafana-enterprise latest → [Updates: latest]
• prom/prometheus latest → [Updates: latest]
• provectuslabs/kafka-ui latest → [Updates: latest]
• apache/kafka latest → [Updates: latest]
• theperiklis/log-generator latest → [Updates: latest]

tools/dev/loki-tsdb-storage-s3/docker-compose.yml (7)

• hashicorp/consul unknown version → [Updates: undefined]
• minio/minio RELEASE.2024-02-24T17-11-14Z → [Updates: RELEASE.2024-02-24T17-11-14Z]
• memcached 1.6.45-alpine@sha256:c29847751abb41f4c268c84fb3087fee05d4edcbda44409ccb5086e26148e8a7
• jaegertracing/all-in-one 1.76.0@sha256:ab6f1a1f0fb49ea08bcd19f6b84f6081d0d44b364b6de148e1798eb5816bacac
• grafana/grafana unknown version → [Updates: undefined]
• mingrammer/flog unknown version → [Updates: undefined]
• mingrammer/flog unknown version → [Updates: undefined]

tools/kafka/plain/docker-compose.yml (2)

• wurstmeister/zookeeper unknown version → [Updates: undefined]
• wurstmeister/kafka unknown version → [Updates: undefined]

tools/kafka/sasl-plain/docker-compose.yml (2)

• confluentinc/cp-zookeeper latest → [Updates: latest]
• confluentinc/cp-kafka latest → [Updates: latest]

tools/kafka/sasl-scram/docker-compose.yml (2)

• confluentinc/cp-zookeeper latest → [Updates: latest]
• confluentinc/cp-kafka latest → [Updates: latest]

tools/kafka/sasl-ssl/docker-compose.yml (2)

• confluentinc/cp-zookeeper latest → [Updates: latest]
• confluentinc/cp-kafka latest → [Updates: latest]

tools/kafka/ssl/docker-compose.yml (2)

• confluentinc/cp-zookeeper latest → [Updates: latest]
• confluentinc/cp-kafka latest → [Updates: latest]

tools/stream-generator/docker-compose.yaml (3)

• provectuslabs/kafka-ui latest → [Updates: latest]
• apache/kafka latest → [Updates: latest]
• theperiklis/loki feat-usage-tracker-293aed8 → [Updates: feat-usage-tracker-293aed8]

dockerfile (21)

clients/cmd/docker-driver/Dockerfile (2)

• alpine 3.24.1@sha256:28bd5fe8b56d1bd048e5babf5b10710ebe0bae67db86916198a6eec434943f8b
• alpine 3.24.1@sha256:28bd5fe8b56d1bd048e5babf5b10710ebe0bae67db86916198a6eec434943f8b

clients/cmd/fluent-bit/Dockerfile (2)

• golang 1.26.5-bookworm → [Updates: 1.26.5-bookworm]
• fluent/fluent-bit 5.1.0@sha256:bf09d620b6b45c080b4da86ac5d98fd3739c1213a148f93dec884fdcc64084cb

clients/cmd/fluentd/Dockerfile (2)

• ruby 4.0.6@sha256:d9a5d26be31a40fb043069f816ba39139c1f38758aea530341eb7e2c153e4ab4 → [Updates: 4.0.6]
• fluent/fluentd v1.19-debian-1 → [Updates: v1.19-debian-1]

clients/cmd/logstash/Dockerfile (1)

• logstash 9.4.4@sha256:7bf793131b910ce62b4683ae6dc304c15b6981688c38b50e953ce931bfa2c6cf → [Updates: 9.4.4]

cmd/logcli/Dockerfile (2)

• golang 1.26 → [Updates: 1.26]
• gcr.io/distroless/static debug → [Updates: debug]

cmd/logql-analyzer/Dockerfile (2)

• golang 1.26 → [Updates: 1.26]
• gcr.io/distroless/static debug → [Updates: debug]

cmd/loki-canary-boringcrypto/Dockerfile (2)

• golang 1.26 → [Updates: 1.26]
• gcr.io/distroless/base-nossl debug

cmd/loki-canary/Dockerfile (2)

• golang 1.26 → [Updates: 1.26]
• gcr.io/distroless/static debug → [Updates: debug]

cmd/loki-canary/Dockerfile.cross (2)

• golang 1.26 → [Updates: 1.26]
• gcr.io/distroless/static debug → [Updates: debug]

cmd/loki/Dockerfile (3)

• golang 1.26 → [Updates: 1.26]
• golang 1.26 → [Updates: 1.26]
• gcr.io/distroless/static nonroot → [Updates: nonroot]

cmd/loki/Dockerfile.cross (3)

• golang 1.26 → [Updates: 1.26]
• golang 1.26 → [Updates: 1.26]
• gcr.io/distroless/static nonroot → [Updates: nonroot]

cmd/loki/Dockerfile.debug (2)

• golang 1.26 → [Updates: 1.26]
• gcr.io/distroless/base-nossl debug → [Updates: debug]

cmd/migrate/Dockerfile (2)

• golang 1.26 → [Updates: 1.26]
• gcr.io/distroless/static debug → [Updates: debug]

cmd/querytee/Dockerfile (2)

• golang 1.26 → [Updates: 1.26]
• gcr.io/distroless/static debug → [Updates: debug]

loki-build-image/Dockerfile

operator/calculator.Dockerfile (2)

• golang 1.26.5@sha256:3aff6657219a4d9c14e27fb1d8976c49c29fddb70ba835014f477e1c70636647 → [Updates: 1.26.5]
• gcr.io/distroless/static nonroot → [Updates: nonroot]

operator/Dockerfile (2)

• golang 1.26.5@sha256:3aff6657219a4d9c14e27fb1d8976c49c29fddb70ba835014f477e1c70636647 → [Updates: 1.26.5]
• gcr.io/distroless/static nonroot → [Updates: nonroot]

operator/passthrough-gateway.Dockerfile (2)

• golang 1.26.5@sha256:3aff6657219a4d9c14e27fb1d8976c49c29fddb70ba835014f477e1c70636647 → [Updates: 1.26.5]
• gcr.io/distroless/static nonroot → [Updates: nonroot]

production/helm/loki/src/helm-test/Dockerfile (2)

• golang 1.26 → [Updates: 1.26]
• gcr.io/distroless/static debug → [Updates: debug]

tools/dev/loki-tsdb-storage-s3/dev.dockerfile (2)

• golang 1.26.5@sha256:3aff6657219a4d9c14e27fb1d8976c49c29fddb70ba835014f477e1c70636647 → [Updates: 1.26.5]
• alpine 3.24.1@sha256:28bd5fe8b56d1bd048e5babf5b10710ebe0bae67db86916198a6eec434943f8b

tools/stream-generator/Dockerfile (2)

• golang 1.26 → [Updates: 1.26]
• gcr.io/distroless/static debug → [Updates: debug]

git-submodules (1)

.gitmodules (1)

• operator/website/themes/doks 14fe597271d6efc7d77461798f22a6af068300d2 → [Updates: undefined]

github-actions (31)

.github/workflows/backport.yml (2)

• grafana/shared-workflows create-github-app-token/v0.3.1@46f48da11e78ebdba7a8747ae456b11062fac83e
• actions/checkout v6.1.0@d23441a48e516b6c34aea4fa41551a30e30af803 → [Updates: v7.0.1]

.github/workflows/build-loki-binary.yml (3)

• actions/checkout v6.1.0@d23441a48e516b6c34aea4fa41551a30e30af803 → [Updates: v7.0.1]
• actions/setup-go v6.5.0@924ae3a1cded613372ab5595356fb5720e22ba16 → [Updates: v7.0.0]
• go ${{ env.GO_VERSION }}

.github/workflows/claude-code-review.yml (2)

• actions/checkout v6.1.0@d23441a48e516b6c34aea4fa41551a30e30af803 → [Updates: v7.0.1]
• anthropics/claude-code-action 1.0@edd85d61533cbba7b57ed0ca4af1750b1fdfd3c4

.github/workflows/claude.yml (2)

• actions/checkout v6.1.0@d23441a48e516b6c34aea4fa41551a30e30af803 → [Updates: v7.0.1]
• anthropics/claude-code-action 1.0@edd85d61533cbba7b57ed0ca4af1750b1fdfd3c4

.github/workflows/conventional-commits.yml (1)

• amannn/action-semantic-pull-request v6.1.1@48f256284bd46cdaab1048c3721360e808335d50

.github/workflows/deploy-pr-preview.yml (1)

• grafana/writers-toolkit main → [Updates: main]

.github/workflows/govulncheck.yml (3)

• actions/checkout v6.1.0@d23441a48e516b6c34aea4fa41551a30e30af803 → [Updates: v7.0.1]
• actions/setup-go v6.5.0@924ae3a1cded613372ab5595356fb5720e22ba16 → [Updates: v7.0.0]
• go ${{ env.GO_VERSION }}

.github/workflows/helm-ci.yml (14)

• actions/checkout v6.1.0@d23441a48e516b6c34aea4fa41551a30e30af803 → [Updates: v7.0.1]
• azure/setup-helm v5.0.1@9bc31f4ebc9c6b171d7bfbaa5d006ae7abdb4310
• actions/setup-python v7.0.0@5fda3b95a4ea91299a34e894583c3862153e4b97
• helm/chart-testing-action v2.8.0@6ec842c01de15ebb84c8627d2744a0c2f2755c9f
• helm/kind-action v1.14.0@ef37e7f390d99f746eb8b610417061a60e82a6cc
• actions/checkout v6.1.0@d23441a48e516b6c34aea4fa41551a30e30af803 → [Updates: v7.0.1]
• actions/checkout v6.1.0@d23441a48e516b6c34aea4fa41551a30e30af803 → [Updates: v7.0.1]
• actions/checkout v6.1.0@d23441a48e516b6c34aea4fa41551a30e30af803 → [Updates: v7.0.1]
• azure/setup-helm v5.0.1@9bc31f4ebc9c6b171d7bfbaa5d006ae7abdb4310
• fluxcd/flux2 v2.9.3@16602fa989daa99762f1c6d1186ae2ad1c735815 → [Updates: v2.9.4]
• helm/kind-action v1.14.0@ef37e7f390d99f746eb8b610417061a60e82a6cc
• helm v4.2.2 → [Updates: v4.2.3, v4.2.2]
• python 3.13
• helm v4.2.2 → [Updates: v4.2.3, v4.2.2]

.github/workflows/helm-diff-ci.yml (5)

• actions/checkout v6.1.0@d23441a48e516b6c34aea4fa41551a30e30af803 → [Updates: v7.0.1]
• azure/setup-helm v5.0.1@9bc31f4ebc9c6b171d7bfbaa5d006ae7abdb4310
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• actions/checkout v6.1.0@d23441a48e516b6c34aea4fa41551a30e30af803 → [Updates: v7.0.1]
• actions/download-artifact v8.0.1@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c

.github/workflows/helm-release.yaml

.github/workflows/helm-tagged-release-pr.yaml (3)

• actions/checkout v6@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7, v6]
• grafana/shared-workflows create-github-app-token/v0.3.1@46f48da11e78ebdba7a8747ae456b11062fac83e
• peter-evans/create-pull-request v8@5f6978faf089d4d20b00c7766989d076bb2fc7f1

.github/workflows/images.yml (5)

• node 24
• node 24
• node 24
• node 24
• node 24

.github/workflows/labeler.yml (2)

• grafana/shared-workflows create-github-app-token/v0.3.1@46f48da11e78ebdba7a8747ae456b11062fac83e
• actions/labeler v6.2.0@b8dd2d9be0f68b860e7dae5dae7d772984eacd6d → [Updates: v7.0.0]

.github/workflows/lint-jsonnet.yml (3)

• actions/checkout v6.1.0@d23441a48e516b6c34aea4fa41551a30e30af803 → [Updates: v7.0.1]
• actions/setup-go v6.5.0@924ae3a1cded613372ab5595356fb5720e22ba16 → [Updates: v7.0.0]
• go 1.26.5

.github/workflows/logql-bench.yml (9)

• actions/checkout v6.1.0@d23441a48e516b6c34aea4fa41551a30e30af803 → [Updates: v7.0.1]
• actions/setup-go v6.5.0@924ae3a1cded613372ab5595356fb5720e22ba16 → [Updates: v7.0.0]
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• actions/checkout v6.1.0@d23441a48e516b6c34aea4fa41551a30e30af803 → [Updates: v7.0.1]
• actions/download-artifact v8.0.1@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• actions/setup-go v6.5.0@924ae3a1cded613372ab5595356fb5720e22ba16 → [Updates: v7.0.0]
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• go 1.26.5
• go 1.26.5

.github/workflows/logql-correctness.yml (9)

• actions/checkout v6.1.0@d23441a48e516b6c34aea4fa41551a30e30af803 → [Updates: v7.0.1]
• actions/setup-go v6.5.0@924ae3a1cded613372ab5595356fb5720e22ba16 → [Updates: v7.0.0]
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• actions/checkout v6.1.0@d23441a48e516b6c34aea4fa41551a30e30af803 → [Updates: v7.0.1]
• actions/download-artifact v8.0.1@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• actions/setup-go v6.5.0@924ae3a1cded613372ab5595356fb5720e22ba16 → [Updates: v7.0.0]
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• go 1.26.5
• go 1.26.5

.github/workflows/minor-release-pr.yml (49)

• actions/checkout v4 → [Updates: v7, v4]
• actions/checkout v4 → [Updates: v7, v4]
• actions/setup-node v4 → [Updates: v7, v4]
• actions/checkout v4 → [Updates: v7, v4]
• actions/checkout v4 → [Updates: v7, v4]
• actions/checkout v4 → [Updates: v7, v4]
• actions/setup-node v4 → [Updates: v7, v4]
• actions/checkout v4 → [Updates: v7, v4]
• actions/checkout v4 → [Updates: v7, v4]
• actions/setup-node v4 → [Updates: v7, v4]
• actions/checkout v4 → [Updates: v7, v4]
• actions/checkout v4 → [Updates: v7, v4]
• actions/setup-node v4 → [Updates: v7, v4]
• actions/checkout v4 → [Updates: v7, v4]
• actions/checkout v4 → [Updates: v7, v4]
• actions/setup-node v4 → [Updates: v7, v4]
• actions/checkout v4 → [Updates: v7, v4]
• actions/checkout v4 → [Updates: v7, v4]
• actions/setup-node v4 → [Updates: v7, v4]
• actions/checkout v4 → [Updates: v7, v4]
• actions/checkout v4 → [Updates: v7, v4]
• actions/setup-node v4 → [Updates: v7, v4]
• actions/checkout v4 → [Updates: v7, v4]
• actions/checkout v4 → [Updates: v7, v4]
• actions/setup-node v4 → [Updates: v7, v4]
• actions/checkout v4 → [Updates: v7, v4]
• actions/checkout v4 → [Updates: v7, v4]
• actions/setup-node v4 → [Updates: v7, v4]
• actions/checkout v4 → [Updates: v7, v4]
• actions/checkout v4 → [Updates: v7, v4]
• actions/setup-node v4 → [Updates: v7, v4]
• actions/checkout v4 → [Updates: v7, v4]
• actions/checkout v4 → [Updates: v7, v4]
• actions/setup-node v4 → [Updates: v7, v4]
• actions/checkout v4 → [Updates: v7, v4]
• actions/checkout v4 → [Updates: v7, v4]
• actions/setup-node v4 → [Updates: v7, v4]
• node 24
• node 24
• node 24
• node 24
• node 24
• node 24
• node 24
• node 24
• node 24
• node 24
• node 24
• node 24

.github/workflows/nix-ci.yaml (4)

• actions/checkout v6@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7, v6]
• cachix/install-nix-action v31.11.0@630ae543ea3a38a9a4166f03376c02c50f408342
• actions/checkout v6@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7, v6]
• cachix/install-nix-action v31.11.0@630ae543ea3a38a9a4166f03376c02c50f408342

.github/workflows/operator-bundle.yaml (2)

• actions/checkout v6 → [Updates: v7, v6]
• actions/setup-go v6 → [Updates: v7, v6]

.github/workflows/operator-check-prepare-release-commit.yml (2)

• grafana/shared-workflows create-github-app-token/v0.3.1@46f48da11e78ebdba7a8747ae456b11062fac83e
• actions/checkout v6.1.0@d23441a48e516b6c34aea4fa41551a30e30af803 → [Updates: v7.0.1]

.github/workflows/operator-release-please.yml (4)

• grafana/shared-workflows create-github-app-token/v0.3.1@46f48da11e78ebdba7a8747ae456b11062fac83e
• googleapis/release-please-action v5.0.0@45996ed1f6d02564a971a2fa1b5860e934307cf7
• grafana/shared-workflows create-github-app-token/v0.3.1@46f48da11e78ebdba7a8747ae456b11062fac83e
• actions/checkout v6.1.0@d23441a48e516b6c34aea4fa41551a30e30af803 → [Updates: v7.0.1]

.github/workflows/operator-reusable-hub-release.yml (4)

• grafana/shared-workflows create-github-app-token/v0.3.1@46f48da11e78ebdba7a8747ae456b11062fac83e
• actions/checkout v6.1.0@d23441a48e516b6c34aea4fa41551a30e30af803 → [Updates: v7.0.1]
• actions/checkout v6.1.0@d23441a48e516b6c34aea4fa41551a30e30af803 → [Updates: v7.0.1]
• fjogeleit/yaml-update-action v0.17.0@dffe9a5223d84653c13374032382f6bb5de8e5ef

.github/workflows/operator-reusable-image-build.yml (5)

• actions/checkout v6.1.0@d23441a48e516b6c34aea4fa41551a30e30af803 → [Updates: v7.0.1]
• docker/setup-qemu-action v4.2.0@96fe6ef7f33517b61c61be40b68a1882f3264fb8
• docker/setup-buildx-action v4.2.0@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c
• docker/login-action v4.6.0@dbcb813823bdd20940b903addbd779551569679f
• docker/build-push-action v7.3.0@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a

.github/workflows/operator-scorecard.yaml (3)

• actions/checkout v6 → [Updates: v7, v6]
• actions/setup-go v6 → [Updates: v7, v6]
• helm/kind-action v1.14.0@ef37e7f390d99f746eb8b610417061a60e82a6cc

.github/workflows/operator.yaml (12)

• actions/checkout v6 → [Updates: v7, v6]
• actions/setup-go v6 → [Updates: v7, v6]
• actions/checkout v6 → [Updates: v7, v6]
• actions/setup-go v6 → [Updates: v7, v6]
• golangci/golangci-lint-action v9.2@1e7e51e771db61008b38414a730f564565cf7c20 → [Updates: v9.3.0]
• actions/checkout v6 → [Updates: v7, v6]
• actions/setup-go v6 → [Updates: v7, v6]
• actions/checkout v6 → [Updates: v7, v6]
• actions/setup-go v6 → [Updates: v7, v6]
• actions/checkout v6 → [Updates: v7, v6]
• actions/setup-go v6 → [Updates: v7, v6]
• golangci/golangci-lint v2.12.2 → [Updates: v2.12.2]

.github/workflows/patch-release-pr.yml (49)

• actions/checkout v4 → [Updates: v7, v4]
• actions/checkout v4 → [Updates: v7, v4]
• actions/setup-node v4 → [Updates: v7, v4]
• actions/checkout v4 → [Updates: v7, v4]
• actions/checkout v4 → [Updates: v7, v4]
• actions/checkout v4 → [Updates: v7, v4]
• actions/setup-node v4 → [Updates: v7, v4]
• actions/checkout v4 → [Updates: v7, v4]
• actions/checkout v4 → [Updates: v7, v4]
• actions/setup-node v4 → [Updates: v7, v4]
• actions/checkout v4 → [Updates: v7, v4]
• actions/checkout v4 → [Updates: v7, v4]
• actions/setup-node v4 → [Updates: v7, v4]
• actions/checkout v4 → [Updates: v7, v4]
• actions/checkout v4 → [Updates: v7, v4]
• actions/setup-node v4 → [Updates: v7, v4]
• actions/checkout v4 → [Updates: v7, v4]
• actions/checkout v4 → [Updates: v7, v4]
• actions/setup-node v4 → [Updates: v7, v4]
• actions/checkout v4 → [Updates: v7, v4]
• actions/checkout v4 → [Updates: v7, v4]
• actions/setup-node v4 → [Updates: v7, v4]
• actions/checkout v4 → [Updates: v7, v4]
• actions/checkout v4 → [Updates: v7, v4]
• actions/setup-node v4 → [Updates: v7, v4]
• actions/checkout v4 → [Updates: v7, v4]
• actions/checkout v4 → [Updates: v7, v4]
• actions/setup-node v4 → [Updates: v7, v4]
• actions/checkout v4 → [Updates: v7, v4]
• actions/checkout v4 → [Updates: v7, v4]
• actions/setup-node v4 → [Updates: v7, v4]
• actions/checkout v4 → [Updates: v7, v4]
• actions/checkout v4 → [Updates: v7, v4]
• actions/setup-node v4 → [Updates: v7, v4]
• actions/checkout v4 → [Updates: v7, v4]
• actions/checkout v4 → [Updates: v7, v4]
• actions/setup-node v4 → [Updates: v7, v4]
• node 24
• node 24
• node 24
• node 24
• node 24
• node 24
• node 24
• node 24
• node 24
• node 24
• node 24
• node 24

.github/workflows/querytee-images.yml (4)

• actions/checkout v6.1.0@d23441a48e516b6c34aea4fa41551a30e30af803 → [Updates: v7.0.1]
• docker/setup-buildx-action v4.2.0@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c
• docker/build-push-action v7.3.0@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a
• docker/setup-buildx-action v4.2.0@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c

.github/workflows/release.yml (9)

• actions/checkout v4 → [Updates: v7, v4]
• actions/checkout v4 → [Updates: v7, v4]
• actions/setup-node v4 → [Updates: v7, v4]
• actions/checkout v4 → [Updates: v7, v4]
• actions/checkout v4 → [

✂ Note

PR body was truncated to here.