Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Awaiting Schedule

These updates are awaiting their schedule. Click on a checkbox to get an update now.

• chore(deps): bump actions/setup-go from v5.3.0 to v5.4.0

---

Warning

Renovate failed to look up the following dependencies: Failed to look up go package github.com/envoyproxy/go-control-plane.

Files affected: go.mod

---

Detected dependencies

dockerfile

test/dockerfiles/postgres.dockerfile

• postgres latest@sha256:81f32a88ec561664634637dd446487efd5f9d90996304b96210078e90e5c8b21
• postgres latest@sha256:81f32a88ec561664634637dd446487efd5f9d90996304b96210078e90e5c8b21

test/dockerfiles/universal.Dockerfile

• ghcr.io/kumahq/ubuntu-netools main@sha256:5417a86c3f7d67be1e18a144fff765cde9c1d6839145a6771855989752dfcda2

tools/releases/dockerfiles/base-root.Dockerfile

• gcr.io/distroless/base-nossl-debian11 debug@sha256:d66c60eff6c55972af9e661a57c1afe96ef4ddfa4fff37b625a448df41a15820

tools/releases/dockerfiles/base.Dockerfile

• gcr.io/distroless/base-nossl-debian11 debug-nonroot@sha256:934b713496a9ed100550aaa58636270c4d69c27040e44f2aed1fa39594c45eba

tools/releases/dockerfiles/envoy.Dockerfile

• debian 12.10@sha256:18023f131f52fc3ea21973cabffe0b216c60b417fd2478e94d9d59981ebba6af

tools/releases/dockerfiles/kuma-cni.Dockerfile

tools/releases/dockerfiles/kuma-cp.Dockerfile

tools/releases/dockerfiles/kuma-dp.Dockerfile

tools/releases/dockerfiles/kuma-init.Dockerfile

• gcr.io/k8s-staging-build-image/distroless-iptables v0.7.3@sha256:25cc119a89bf860f964e5c47d0422eabcd260424692a2b6d4e7a74d5c3bb2231

tools/releases/dockerfiles/kumactl.Dockerfile

tools/releases/dockerfiles/static.Dockerfile

• gcr.io/distroless/static-debian11 debug-nonroot@sha256:55716e80a7d4320ce9bc2dc8636fc193b418638041b817cf3306696bd0f975d1

github-actions

.github/workflows/_build_publish.yaml

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/setup-go v5.3.0@f111f3307d8850f501ac008e886eec1fd1932a34
• actions/cache v4.2.2@d4323d4df104b026a6aa633fdb11d772146be0bf
• actions/upload-artifact v4.6.1@4cec3d8aa04e39d1a68397de0c4cd6fb9dce8ec1
• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/setup-go v5.3.0@f111f3307d8850f501ac008e886eec1fd1932a34
• actions/cache v4.2.2@d4323d4df104b026a6aa633fdb11d772146be0bf
• regclient/actions ce5fd131e371ffcdd7508b478cb223b3511a9183
• actions/upload-artifact v4.6.1@4cec3d8aa04e39d1a68397de0c4cd6fb9dce8ec1
• actions/upload-artifact v4.6.1@4cec3d8aa04e39d1a68397de0c4cd6fb9dce8ec1
• actions/download-artifact v4.2.0@b14cf4c92620c250e1c074ab0a5800e37df86765
• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/setup-go v5.3.0@f111f3307d8850f501ac008e886eec1fd1932a34
• actions/cache v4.2.2@d4323d4df104b026a6aa633fdb11d772146be0bf
• actions/upload-artifact v4.6.1@4cec3d8aa04e39d1a68397de0c4cd6fb9dce8ec1
• actions/create-github-app-token v1.11.6@21cfef2b496dd8ef5b904c159339626a10ad380e
• ubuntu 24.04
• ubuntu 24.04
• ubuntu 24.04
• ubuntu 24.04

.github/workflows/_e2e.yaml

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/setup-go v5.3.0@f111f3307d8850f501ac008e886eec1fd1932a34
• actions/cache v4.2.2@d4323d4df104b026a6aa633fdb11d772146be0bf
• nick-fields/retry v3.0.2@ce71cc2ab81d554ebbe88c79ab5975992d79ba08
• actions/upload-artifact v4.6.1@4cec3d8aa04e39d1a68397de0c4cd6fb9dce8ec1
• actions/upload-artifact v4.6.1@4cec3d8aa04e39d1a68397de0c4cd6fb9dce8ec1

.github/workflows/_provenance.yaml

• slsa-framework/slsa-github-generator v2.1.0
• slsa-framework/slsa-github-generator v2.1.0

.github/workflows/_test.yaml

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/setup-go v5.3.0@f111f3307d8850f501ac008e886eec1fd1932a34
• actions/cache v4.2.2@d4323d4df104b026a6aa633fdb11d772146be0bf
• ubuntu 24.04
• ubuntu 24.04

.github/workflows/auto-merge.yaml

• actions/create-github-app-token v1.11.6@21cfef2b496dd8ef5b904c159339626a10ad380e
• ubuntu 24.04

.github/workflows/backport.yaml

• marocchino/sticky-pull-request-comment v2.9.1@52423e01640425a022ef5fd42c6fb5f633a02728
• tibdex/github-app-token v2.1.0@3beb63f4bd073e61482598c45c71c1019b59b73a
• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• peter-evans/create-pull-request v7.0.8@271a8d0340265f705b14b6d32b9829c1cb33d45e

.github/workflows/bom.yaml

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/setup-go v5.3.0@f111f3307d8850f501ac008e886eec1fd1932a34
• CycloneDX/gh-gomod-generate-sbom v2.0.0@efc74245d6802c8cefd925620515442756c70d8f
• actions/upload-artifact v4.6.1@4cec3d8aa04e39d1a68397de0c4cd6fb9dce8ec1
• ubuntu 24.04

.github/workflows/build-test-distribute.yaml

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/setup-go v5.3.0@f111f3307d8850f501ac008e886eec1fd1932a34
• golangci/golangci-lint-action v6.5.2@55c2c1448f86e01eaae002a5a3a9624417608d84
• actions/cache v4.2.2@d4323d4df104b026a6aa633fdb11d772146be0bf
• actions/download-artifact v4.2.0@b14cf4c92620c250e1c074ab0a5800e37df86765
• actions/download-artifact v4.2.0@b14cf4c92620c250e1c074ab0a5800e37df86765
• cloudsmith-io/action v0.6.14@7af394e0f8add4867bce109385962dafecad1b8d
• ubuntu 24.04
• ubuntu 24.04

.github/workflows/check.yaml

• ubuntu 24.04

.github/workflows/ci-stability-master.yaml

• ubuntu 24.04

.github/workflows/ci-stability-release-branches.yaml

• ubuntu 24.04
• ubuntu 24.04

.github/workflows/ci-stability.yaml

• actions/create-github-app-token v1.11.6@21cfef2b496dd8ef5b904c159339626a10ad380e
• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• ubuntu 24.04

.github/workflows/codeql.yaml

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/setup-go v5.3.0@f111f3307d8850f501ac008e886eec1fd1932a34
• github/codeql-action v3.28.11@6bb031afdd8eb862ea3fc1848194185e076637e5
• github/codeql-action v3.28.11@6bb031afdd8eb862ea3fc1848194185e076637e5
• github/codeql-action v3.28.11@6bb031afdd8eb862ea3fc1848194185e076637e5
• ubuntu 24.04

.github/workflows/lifecycle.yml

• kumahq/.github f98e381472c34234ecdaa4f26d72996d55d16759

.github/workflows/merge-release-to-master.yaml

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/setup-go v5.3.0@f111f3307d8850f501ac008e886eec1fd1932a34
• actions/create-github-app-token v1.11.6@21cfef2b496dd8ef5b904c159339626a10ad380e
• peter-evans/create-pull-request v7.0.8@271a8d0340265f705b14b6d32b9829c1cb33d45e
• ubuntu 24.04

.github/workflows/pr-comments.yaml

• actions/create-github-app-token v1.11.6@21cfef2b496dd8ef5b904c159339626a10ad380e
• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/setup-go v5.3.0@f111f3307d8850f501ac008e886eec1fd1932a34
• actions/cache v4.2.2@d4323d4df104b026a6aa633fdb11d772146be0bf
• ubuntu 24.04

.github/workflows/pr-merged.yaml

• actions/github-script v7.0.1@60a0d83039c74a4aee543508d2ffcb1c3799cdea
• ubuntu 24.04

.github/workflows/pr-modification.yaml

• marocchino/sticky-pull-request-comment v2.9.1@52423e01640425a022ef5fd42c6fb5f633a02728
• ubuntu 24.04
• ubuntu 24.04

.github/workflows/release.yaml

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/setup-go v5.3.0@f111f3307d8850f501ac008e886eec1fd1932a34
• actions/create-github-app-token v1.11.6@21cfef2b496dd8ef5b904c159339626a10ad380e
• peter-evans/create-pull-request v7.0.8@271a8d0340265f705b14b6d32b9829c1cb33d45e
• ubuntu 24.04

.github/workflows/scorecard.yml

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• ossf/scorecard-action v2.4.1@f49aabe0b5af0936a0987cfb85d86b75731b0186
• actions/upload-artifact v4.6.1@4cec3d8aa04e39d1a68397de0c4cd6fb9dce8ec1
• github/codeql-action v3.28.11@6bb031afdd8eb862ea3fc1848194185e076637e5
• ubuntu 24.04

.github/workflows/transparentproxy-tests.yaml

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/setup-go v5.3.0@f111f3307d8850f501ac008e886eec1fd1932a34
• actions/cache v4.2.2@d4323d4df104b026a6aa633fdb11d772146be0bf
• ubuntu 24.04

.github/workflows/update-docs.yaml

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/setup-go v5.3.0@f111f3307d8850f501ac008e886eec1fd1932a34
• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/create-github-app-token v1.11.6@21cfef2b496dd8ef5b904c159339626a10ad380e
• peter-evans/create-pull-request v7.0.8@271a8d0340265f705b14b6d32b9829c1cb33d45e
• ubuntu 24.04

.github/workflows/update-insecure-dependencies.yaml

• pierotofy/set-swap-space 0404882bc4666c0ff2f6fd8b3d32af69a730183c
• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/setup-go v5.3.0@f111f3307d8850f501ac008e886eec1fd1932a34
• actions/create-github-app-token v1.11.6@21cfef2b496dd8ef5b904c159339626a10ad380e
• peter-evans/create-pull-request v7.0.8@271a8d0340265f705b14b6d32b9829c1cb33d45e
• ubuntu 24.04
• ubuntu 24.04

gomod

go.mod

• go 1.23.6
• cirello.io/pglock v1.16.0
• github.com/Masterminds/semver/v3 v3.3.1
• github.com/Masterminds/sprig/v3 v3.3.0
• github.com/Nordix/simple-ipam v1.0.0
• github.com/asaskevich/govalidator v0.0.0-20230301143203-a9d515a09cc2@a9d515a09cc2
• github.com/bakito/go-log-logr-adapter v0.0.3-0.20240527124623-de85860b7d21@de85860b7d21
• github.com/cilium/ebpf v0.17.3
• github.com/containernetworking/cni v1.2.3
• github.com/containernetworking/plugins v1.6.2
• github.com/emicklei/go-restful/v3 v3.12.2
• github.com/envoyproxy/go-control-plane v0.13.4
• github.com/envoyproxy/go-control-plane/contrib v1.32.4
• github.com/envoyproxy/go-control-plane/envoy v1.32.4
• github.com/envoyproxy/protoc-gen-validate v1.2.1
• github.com/evanphx/json-patch/v5 v5.9.11
• github.com/exaring/otelpgx v0.9.0
• github.com/go-logr/logr v1.4.2
• github.com/go-logr/zapr v1.3.0
• github.com/goburrow/cache v0.1.4
• github.com/golang-jwt/jwt/v5 v5.2.1
• github.com/golang-migrate/migrate/v4 v4.18.2
• github.com/golang/protobuf v1.5.4
• github.com/google/go-cmp v0.7.0
• github.com/google/uuid v1.6.0
• github.com/grpc-ecosystem/go-grpc-prometheus v1.2.0
• github.com/gruntwork-io/terratest v0.48.2
• github.com/hoisie/mustache v0.0.0-20160804235033-6375acf62c69@6375acf62c69
• github.com/jackc/pgx/v5 v5.7.2
• github.com/josephburnett/jd/v2 v2.0.0-20240818191833-6125a15c637a@6125a15c637a
• github.com/kelseyhightower/envconfig v1.4.0
• github.com/miekg/dns v1.1.64
• github.com/moby/sys/mountinfo v0.7.2
• github.com/natefinch/atomic v1.0.1
• github.com/onsi/ginkgo/v2 v2.23.0
• github.com/onsi/gomega v1.36.2
• github.com/patrickmn/go-cache v2.1.0+incompatible
• github.com/pkg/errors v0.9.1
• github.com/prometheus/client_golang v1.21.1
• github.com/prometheus/client_model v0.6.1
• github.com/prometheus/common v0.63.0
• github.com/sethvargo/go-retry v0.3.0
• github.com/shopspring/decimal v1.4.0
• github.com/slok/go-http-metrics v0.13.0
• github.com/spf13/cobra v1.9.1
• github.com/spf13/pflag v1.0.6
• github.com/spiffe/go-spiffe/v2 v2.5.0
• github.com/testcontainers/testcontainers-go v0.35.0
• github.com/tonglil/opentelemetry-go-datadog-propagator v0.1.3
• github.com/vishvananda/netlink v1.3.0
• github.com/vishvananda/netns v0.0.5
• go.opentelemetry.io/contrib/instrumentation/github.com/emicklei/go-restful/otelrestful v0.60.0
• go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.60.0
• go.opentelemetry.io/otel v1.35.0
• go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc v1.35.0
• go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.35.0
• go.opentelemetry.io/otel/exporters/prometheus v0.57.0
• go.opentelemetry.io/otel/sdk v1.35.0
• go.opentelemetry.io/otel/sdk/metric v1.35.0
• go.opentelemetry.io/otel/trace v1.35.0
• go.opentelemetry.io/proto/otlp v1.5.0
• go.uber.org/multierr v1.11.0
• go.uber.org/zap v1.27.0
• golang.org/x/net v0.37.0
• golang.org/x/sync v0.12.0
• golang.org/x/sys v0.31.0
• golang.org/x/text v0.23.0
• gonum.org/v1/gonum v0.15.1
• google.golang.org/genproto/googleapis/api v0.0.0-20250218202821-56aae31c358a@56aae31c358a
• google.golang.org/genproto/googleapis/rpc v0.0.0-20250218202821-56aae31c358a@56aae31c358a
• google.golang.org/grpc v1.71.0
• google.golang.org/protobuf v1.36.5
• gopkg.in/natefinch/lumberjack.v2 v2.2.1
• helm.sh/helm/v3 v3.17.2
• k8s.io/api v0.32.3
• k8s.io/apiextensions-apiserver v0.32.3
• k8s.io/apimachinery v0.32.3
• k8s.io/client-go v0.32.3
• k8s.io/klog/v2 v2.130.1
• k8s.io/kube-openapi v0.0.0-20241212222426-2c72e554b1e7@2c72e554b1e7
• k8s.io/kubectl v0.32.3
• k8s.io/utils v0.0.0-20241210054802-24370beab758@24370beab758
• sigs.k8s.io/controller-runtime v0.20.3
• sigs.k8s.io/controller-tools v0.17.2
• sigs.k8s.io/gateway-api v1.2.1
• sigs.k8s.io/yaml v1.4.0
• github.com/invopop/jsonschema v0.13.0
• github.com/wk8/go-ordered-map/v2 v2.1.8
• golang.org/x/exp v0.0.0-20250128182459-e0ece0dbea4c@e0ece0dbea4c
• golang.org/x/tools v0.31.0

helm-values

deployments/charts/kuma/values.yaml

• kuma-cp undefined
• kuma-cni undefined
• kuma-dp undefined
• kuma-init undefined
• kumactl undefined
• docker.io/bitnami/kubectl 1.32.3@sha256:c49b008f8ac9973e2d23deff64db6b992b8bd8c76538d0e697d9318bbbf683e2

kubernetes

app/kumactl/data/install/k8s/demo/demo.yaml

• redis sha256:6aafb7f25fc93c4ff74e99cff8e85899f03901bc96e61ba12cd3c39e95503c73
• kumahq/kuma-demo sha256:9b11fb97144523cd5d5cc021445dd7f59d4b72bc49727fefbdf0d3f07a7dd5c1
• Deployment apps/v1
• Deployment apps/v1

app/kumactl/data/install/k8s/logging/loki/loki.yaml

• grafana/promtail 3.4.2@sha256:c6e9a987ca086cbfef945b8ebd708eb09f98b5e78bfb659e4e5a8b3bd604d11b
• grafana/loki 3.4.2@sha256:58a6c186ce78ba04d58bfe2a927eff296ba733a430df09645d56cdc158f3ba08

app/kumactl/data/install/k8s/metrics/grafana/grafana.yaml

• alpine sha256:a8560b36e8b8210634f77d9f7f9efd7ffa463e380b75e2e74aff4511df3ef88c
• grafana/grafana 11.5.2@sha256:8b37a2f028f164ce7b9889e1765b9d6ee23fec80f871d156fbf436d6198d32b7

app/kumactl/data/install/k8s/metrics/prometheus/kube-stats-metrics.yaml

• bitnami/kube-state-metrics 2.15.0@sha256:929ee8c6bb15788412becb9de354098121517771f3ecf5dc94a3148854243c3c
• ClusterRole rbac.authorization.k8s.io/v1
• ClusterRoleBinding rbac.authorization.k8s.io/v1
• Deployment apps/v1

app/kumactl/data/install/k8s/metrics/prometheus/server.yaml

• jimmidyson/configmap-reload v0.9.0@sha256:f34fe394b1dab3982025c4107df5526ca773bc245adac7dbef877ccb5f5d5df5
• prom/prometheus v3.2.1@sha256:6927e0919a144aa7616fd0137d4816816d42f6b816de3af269ab065250859a62
• ClusterRole rbac.authorization.k8s.io/v1
• ClusterRoleBinding rbac.authorization.k8s.io/v1
• Deployment apps/v1

app/kumactl/data/install/k8s/tracing/jaeger/all-in-one-template.yaml

• jaegertracing/all-in-one 1.67.0@sha256:34e3d18e0f2eeb9abd9bb53d0dc7abaf2a5b1c884fdca575093af3126811a9d3

regex

.github/workflows/_build_publish.yaml

• security-actions/scan-docker-image 4.1.2@ac8939f0382827fbb43ce4e0028066a5ea4db01d
• security-actions/scan-docker-image 4.1.2@ac8939f0382827fbb43ce4e0028066a5ea4db01d
• security-actions/sign-docker-image 4.1.0@f2b77d6aa619dbe3bfcc1ac4f99af7d02614e90a

.github/workflows/build-test-distribute.yaml

• security-actions/sca 4.1.0@f2b77d6aa619dbe3bfcc1ac4f99af7d02614e90a

go.mod

• go-control-plane v0.13.4-kong-1
• envoy v1.32.4-kong-1
• contrib v1.32.4-kong-1
• ratelimit v0.1.0-kong-1

---

• Check this box to trigger a request for Renovate to run again on this repository