Dependency Dashboard

[renovate-sh-app]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Abandoned Dependencies

The following dependencies have not received updates for an extended period and may be unmaintained.

View abandoned dependencies (12)

[!NOTE]
Packages are marked as abandoned when they exceed the abandonmentThreshold since their last release. Unlike deprecated packages with official notices, abandonment is detected by release inactivity.

Datasource	Package	Last Updated
gomod	github.com/atotto/clipboard	2021-02-24
gomod	github.com/beorn7/perks	2019-07-31
gomod	github.com/cespare/xxhash/v2	2024-04-04
gomod	github.com/charmbracelet/harmonica	2022-04-15
gomod	github.com/go-logr/stdr	2021-12-14
gomod	github.com/google/uuid	2024-01-23
gomod	github.com/kylelemons/godebug	2019-05-05
gomod	github.com/muesli/cancelreader	2022-06-22
gomod	github.com/muesli/reflow	2021-05-17
gomod	github.com/munnerz/goautoneg	2019-10-10
gomod	github.com/pkg/browser	2024-01-02
gomod	github.com/rivo/uniseg	2024-02-08

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• chore(deps): update module github.com/go-logr/logr to v1.4.4
• chore(deps): update module github.com/lucasb-eyer/go-colorful to v1.4.1
• chore(deps): update module github.com/mattn/go-runewidth to v0.0.27
• fix(deps): update module charm.land/bubbles/v2 to v2.1.1
• fix(deps): update module charm.land/bubbletea/v2 to v2.0.8
• fix(deps): update module charm.land/lipgloss/v2 to v2.0.5
• fix(deps): update module github.com/aws/smithy-go to v1.27.7
• chore(deps): update module cloud.google.com/go/auth to v0.23.0
• chore(deps): update module github.com/azuread/microsoft-authentication-library-for-go to v1.8.0
• chore(deps): update module github.com/felixge/httpsnoop to v1.1.0
• chore(deps): update module github.com/googleapis/gax-go/v2 to v2.23.0
• chore(deps): update module github.com/prometheus/common to v0.70.1
• chore(deps): update module github.com/prometheus/procfs to v0.21.1
• chore(deps): update module go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp to v0.70.0
• chore(deps): update module golang.org/x/crypto to v0.54.0
• chore(deps): update module golang.org/x/sys to v0.47.0
• chore(deps): update opentelemetry-go monorepo to v1.45.0 (go.opentelemetry.io/otel/metric, go.opentelemetry.io/otel/trace)
• fix(deps): update module github.com/prometheus/client_golang to v1.24.1
• fix(deps): update module golang.org/x/sync to v0.22.0
• fix(deps): update module google.golang.org/api to v0.292.0
• chore(deps): update module go.yaml.in/yaml/v2 to v3
• 🔐 Create all rate-limited PRs at once 🔐

Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

• chore(deps): update github.com/charmbracelet/ultraviolet digest to 006e29f
• chore(deps): update google.golang.org/genproto/googleapis/rpc digest to ec0a776
• chore(deps): update module github.com/charmbracelet/x/ansi to v0.11.8
• chore(deps): update module google.golang.org/protobuf to v1.36.12
• chore(deps): update module github.com/xo/terminfo to v1

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• fix(security/unknown/): update module go.opentelemetry.io/otel to v1.44.0 [security]
• fix(security/unknown/): update module golang.org/x/net to v0.56.0 [security]
• fix(security/unknown/): update module golang.org/x/text to v0.39.0 [security]
• fix(security/unknown/): update module google.golang.org/grpc to v1.82.1 [security]
• chore(deps): update alpine:3.23 docker digest to fd791d7
• chore(deps): update golang:1.26 docker digest to 7caba52
• chore(deps): update module github.com/googleapis/enterprise-certificate-proxy to v0.3.20
• chore(deps): update module github.com/sahilm/fuzzy to v0.1.3
• chore(deps): update module go.yaml.in/yaml/v2 to v2.4.4
• chore(deps): update alpine docker tag to v3.24
• fix(deps): update aws-sdk-go-v2 monorepo (github.com/aws/aws-sdk-go-v2, github.com/aws/aws-sdk-go-v2/config, github.com/aws/aws-sdk-go-v2/credentials, github.com/aws/aws-sdk-go-v2/feature/ec2/imds, github.com/aws/aws-sdk-go-v2/internal/configsources, github.com/aws/aws-sdk-go-v2/internal/endpoints/v2, github.com/aws/aws-sdk-go-v2/internal/v4a, github.com/aws/aws-sdk-go-v2/service/ec2, github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding, github.com/aws/aws-sdk-go-v2/service/internal/presigned-url, github.com/aws/aws-sdk-go-v2/service/signin, github.com/aws/aws-sdk-go-v2/service/sso, github.com/aws/aws-sdk-go-v2/service/ssooidc, github.com/aws/aws-sdk-go-v2/service/sts)
• fix(deps): update azure-sdk-for-go monorepo (github.com/Azure/azure-sdk-for-go/sdk/azcore, github.com/Azure/azure-sdk-for-go/sdk/azidentity, github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v8)
• fix(deps): update module github.com/evertras/bubble-table to v0.22.3
• Click on this checkbox to rebase all open PRs at once

Vulnerabilities

Important

5/6 CVEs have Renovate fixes.

gomod

go.mod

go.opentelemetry.io/otel

• GO-2026-5158 (fixed in >= 1.44.0)

golang.org/x/crypto

• GO-2026-5932

golang.org/x/net

• GO-2026-5942 (fixed in >= 0.56.0)

golang.org/x/text

• GO-2026-5970 (fixed in >= 0.39.0)

google.golang.org/grpc

• GHSA-hrxh-6v49-42gf (fixed in >= 1.82.1)
• GO-2026-6061 (fixed in >= 1.82.1)

Detected Dependencies

dockerfile (1)

Dockerfile.exporter (2)

• golang 1.26@sha256:2d6c80227255c3112a4d08e67ba98e58efd3846daf15d9d7d4c389565d881b1a → [Updates: 1.26]
• alpine 3.23@sha256:5b10f432ef3da1b8d4c7eb6c487f2f5a8f096bc91145e68878dd4a5019afde11 → [Updates: 3.24, 3.23]

github-actions (1)

.github/workflows/go.yml (1)

• go 1.26

gomod (1)

go.mod (79)

• go 1.26
• go 1.26.5
• charm.land/bubbles/v2 v2.1.0 → [Updates: v2.1.1]
• charm.land/bubbletea/v2 v2.0.7 → [Updates: v2.0.8]
• charm.land/lipgloss/v2 v2.0.3 → [Updates: v2.0.5]
• github.com/Azure/azure-sdk-for-go/sdk/azidentity v1.13.1 → [Updates: v1.14.0]
• github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v8 v8.0.0 → [Updates: v8.2.0]
• github.com/aws/aws-sdk-go-v2 v1.41.12 → [Updates: v1.43.4]
• github.com/aws/aws-sdk-go-v2/config v1.32.23 → [Updates: v1.32.35]
• github.com/aws/aws-sdk-go-v2/credentials v1.19.22 → [Updates: v1.19.34]
• github.com/aws/aws-sdk-go-v2/service/ec2 v1.305.2 → [Updates: v1.321.0]
• github.com/aws/smithy-go v1.27.1 → [Updates: v1.27.7]
• github.com/evertras/bubble-table v0.20.0 → [Updates: v0.22.3]
• github.com/google/uuid v1.6.0
• github.com/prometheus/client_golang v1.23.2 → [Updates: v1.24.1]
• golang.org/x/sync v0.21.0 → [Updates: v0.22.0]
• google.golang.org/api v0.283.0 → [Updates: v0.292.0]
• cloud.google.com/go/auth v0.20.0 → [Updates: v0.23.0]
• cloud.google.com/go/auth/oauth2adapt v0.2.8
• cloud.google.com/go/compute/metadata v0.9.0
• github.com/Azure/azure-sdk-for-go/sdk/azcore v1.21.1 → [Updates: v1.22.0]
• github.com/Azure/azure-sdk-for-go/sdk/internal v1.12.0
• github.com/AzureAD/microsoft-authentication-library-for-go v1.7.2 → [Updates: v1.8.0]
• github.com/atotto/clipboard v0.1.4
• github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.18.28 → [Updates: v1.18.35]
• github.com/aws/aws-sdk-go-v2/internal/configsources v1.4.28 → [Updates: v1.4.35]
• github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.7.28 → [Updates: v2.7.35]
• github.com/aws/aws-sdk-go-v2/internal/v4a v1.4.29 → [Updates: v1.4.36]
• github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.13.12 → [Updates: v1.13.15]
• github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.13.28 → [Updates: v1.13.35]
• github.com/aws/aws-sdk-go-v2/service/signin v1.1.4 → [Updates: v1.5.4]
• github.com/aws/aws-sdk-go-v2/service/sso v1.31.2 → [Updates: v1.33.4]
• github.com/aws/aws-sdk-go-v2/service/ssooidc v1.36.5 → [Updates: v1.38.4]
• github.com/aws/aws-sdk-go-v2/service/sts v1.43.2 → [Updates: v1.45.4]
• github.com/beorn7/perks v1.0.1
• github.com/cespare/xxhash/v2 v2.3.0
• github.com/charmbracelet/colorprofile v0.4.3
• github.com/charmbracelet/harmonica v0.2.0
• github.com/charmbracelet/ultraviolet v0.0.0-20260525132238-948f4557a654@948f4557a654 → [Updates: v0.0.0-20260811164956-006e29f97886]
• github.com/charmbracelet/x/ansi v0.11.7 → [Updates: v0.11.8]
• github.com/charmbracelet/x/term v0.2.2
• github.com/charmbracelet/x/termios v0.1.1
• github.com/charmbracelet/x/windows v0.2.2
• github.com/clipperhouse/displaywidth v0.11.0
• github.com/clipperhouse/uax29/v2 v2.7.0
• github.com/felixge/httpsnoop v1.0.4 → [Updates: v1.1.0]
• github.com/go-logr/logr v1.4.3 → [Updates: v1.4.4]
• github.com/go-logr/stdr v1.2.2
• github.com/golang-jwt/jwt/v5 v5.3.1
• github.com/google/s2a-go v0.1.9
• github.com/googleapis/enterprise-certificate-proxy v0.3.16 → [Updates: v0.3.20]
• github.com/googleapis/gax-go/v2 v2.22.0 → [Updates: v2.23.0]
• github.com/kylelemons/godebug v1.1.0
• github.com/lucasb-eyer/go-colorful v1.4.0 → [Updates: v1.4.1]
• github.com/mattn/go-runewidth v0.0.24 → [Updates: v0.0.27]
• github.com/muesli/cancelreader v0.2.2
• github.com/muesli/reflow v0.3.0
• github.com/munnerz/goautoneg v0.0.0-20191010083416-a7dc8b61c822@a7dc8b61c822
• github.com/pkg/browser v0.0.0-20240102092130-5ac0b6a4141c@5ac0b6a4141c
• github.com/prometheus/client_model v0.6.2
• github.com/prometheus/common v0.66.1 → [Updates: v0.70.1]
• github.com/prometheus/procfs v0.16.1 → [Updates: v0.21.1]
• github.com/rivo/uniseg v0.4.7
• github.com/sahilm/fuzzy v0.1.1 → [Updates: v0.1.3]
• github.com/xo/terminfo v0.0.0-20220910002029-abceb7e1c41e@abceb7e1c41e → [Updates: v1.0.0]
• go.opentelemetry.io/auto/sdk v1.2.1
• go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.67.0 → [Updates: v0.70.0]
• go.opentelemetry.io/otel v1.43.0 → [Updates: v1.44.0]
• go.opentelemetry.io/otel/metric v1.43.0 → [Updates: v1.45.0]
• go.opentelemetry.io/otel/trace v1.43.0 → [Updates: v1.45.0]
• go.yaml.in/yaml/v2 v2.4.2 → [Updates: v2.4.4, v3.0.5]
• golang.org/x/crypto v0.52.0 → [Updates: v0.54.0]
• golang.org/x/net v0.55.0 → [Updates: v0.56.0]
• golang.org/x/oauth2 v0.36.0
• golang.org/x/sys v0.45.0 → [Updates: v0.47.0]
• golang.org/x/text v0.37.0 → [Updates: v0.39.0]
• google.golang.org/genproto/googleapis/rpc v0.0.0-20260523011958-0a33c5d7ca68@0a33c5d7ca68 → [Updates: v0.0.0-20260810153831-ec0a7760b754]
• google.golang.org/grpc v1.81.1 → [Updates: v1.82.1]
• google.golang.org/protobuf v1.36.11 → [Updates: v1.36.12]

---

Need help?

You can ask for more help in the following Slack channel: #proj-renovate-self-hosted. In that channel you can also find ADR and FAQ docs in the Resources section.