Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Config Migration Needed

• Select this checkbox to let Renovate create an automated Config Migration PR.

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• Renovate: Update kube-prometheus-stack Docker tag to v85

Vulnerabilities

Important

6/6 CVEs have Renovate fixes.

gomod

go.mod

golang.org/x/net

• GO-2026-5025 (fixed in >= 0.55.0)
• GO-2026-5026 (fixed in >= 0.55.0)
• GO-2026-5027 (fixed in >= 0.55.0)
• GO-2026-5028 (fixed in >= 0.55.0)
• GO-2026-5029 (fixed in >= 0.55.0)
• GO-2026-5030 (fixed in >= 0.55.0)

Detected Dependencies

dockerfile (3)

Dockerfile (1)

• golang 1.26

postgres/Dockerfile (1)

• debian trixie-slim@sha256:b6e2a152f22a40ff69d92cb397223c906017e1391a73c952b588e51af8883bf8

tools/plutono/Dockerfile (1)

• ghcr.io/credativ/plutono v7.5.48

github-actions (13)

.github/actions/setup-claude-code-action/action.yml (2)

• actions/setup-python v6
• python 3.14

.github/workflows/check-alerts.yaml (4)

• actions/checkout v6
• tj-actions/changed-files v47
• azure/setup-helm v5
• peimanja/promtool-github-actions v0.0.2

.github/workflows/claude-assistant.yaml (4)

• actions/checkout v6
• actions/checkout v6
• actions/setup-go v6
• actions/create-github-app-token v3

.github/workflows/claude-weekly.yaml (3)

• actions/checkout v6
• actions/setup-go v6
• actions/create-github-app-token v3

.github/workflows/codeql.yaml (5)

• actions/checkout v6
• actions/setup-go v6
• github/codeql-action v4
• github/codeql-action v4
• github/codeql-action v4

.github/workflows/helm-lint.yaml (5)

• actions/checkout v6
• azure/setup-helm v5.0.0
• actions/setup-python v6.2.0
• helm/chart-testing-action v2.8.0
• python 3.14

.github/workflows/lint.yaml (2)

• actions/checkout v6
• actions/setup-go v6

.github/workflows/push-charts.yaml (5)

• actions/checkout v6
• azure/setup-helm v5.0.0
• docker/login-action v4
• tj-actions/changed-files v47
• tj-actions/changed-files v47

.github/workflows/push-images.yaml (15)

• actions/checkout v6
• docker/setup-qemu-action v4
• docker/setup-buildx-action v4
• docker/login-action v4
• tj-actions/changed-files v47
• docker/metadata-action v6
• docker/build-push-action v7
• actions/attest-build-provenance v4
• tj-actions/changed-files v47
• docker/metadata-action v6
• docker/build-push-action v7
• actions/attest-build-provenance v4
• docker/metadata-action v6
• docker/build-push-action v7
• actions/attest-build-provenance v4

.github/workflows/reuse.yaml (2)

• actions/checkout v6
• fsfe/reuse-action v6

.github/workflows/stale.yaml (1)

• actions/stale v10

.github/workflows/test.yaml (6)

• actions/checkout v6
• actions/setup-go v6
• actions/upload-artifact v7
• actions/github-script v9
• actions/download-artifact v8
• actions/github-script v9

.github/workflows/update-appversion.yml (3)

• actions/checkout v6
• tj-actions/changed-files v47
• tj-actions/changed-files v47

gomod (1)

go.mod (23)

• go 1.26.0
• github.com/cobaltcore-dev/openstack-hypervisor-operator v1.2.2
• github.com/go-gorp/gorp v2.2.0+incompatible
• github.com/gophercloud/gophercloud/v2 v2.12.0
• github.com/ironcore-dev/ironcore v0.3.0
• github.com/prometheus/client_golang v1.23.2
• github.com/prometheus/client_model v0.6.2
• github.com/sapcc/go-bits v0.0.0-20260519090007-308851876285@308851876285
• go.xyrillian.de/gg v1.7.0
• k8s.io/api v0.36.1
• k8s.io/apimachinery v0.36.1
• k8s.io/client-go v0.36.1
• sigs.k8s.io/controller-runtime v0.24.1
• github.com/go-logr/logr v1.4.3
• github.com/google/uuid v1.6.0
• github.com/lib/pq v1.12.3
• github.com/mattn/go-sqlite3 v1.14.44
• github.com/ory/dockertest v3.3.5+incompatible
• github.com/sapcc/go-api-declarations v1.22.0
• go.uber.org/zap v1.28.0
• golang.org/x/sync v0.20.0
• golang.org/x/term v0.43.0
• gopkg.in/yaml.v3 v3.0.1

helmv3 (8)

helm/bundles/cortex-cinder/Chart.yaml (4)

• cortex-postgres 0.6.3
• cortex 0.0.58
• cortex 0.0.58
• owner-info 1.0.0

helm/bundles/cortex-crds/Chart.yaml (2)

• cortex 0.0.58
• owner-info 1.0.0

helm/bundles/cortex-ironcore/Chart.yaml (2)

• cortex 0.0.58
• owner-info 1.0.0

helm/bundles/cortex-manila/Chart.yaml (4)

• cortex-postgres 0.6.3
• cortex 0.0.58
• cortex 0.0.58
• owner-info 1.0.0

helm/bundles/cortex-nova/Chart.yaml (4)

• cortex-postgres 0.6.3
• cortex 0.0.58
• cortex 0.0.58
• owner-info 1.0.0

helm/bundles/cortex-placement-shim/Chart.yaml (2)

• cortex-shim 0.1.0
• owner-info 1.0.0

helm/bundles/cortex-pods/Chart.yaml (2)

• cortex 0.0.58
• owner-info 1.0.0

helm/dev/cortex-prometheus-operator/Chart.yaml (1)

• kube-prometheus-stack 84.5.0 → [Updates: 85.3.3]

regex (5)

Makefile (1)

• sigs.k8s.io/controller-tools v0.21.0

Makefile (1)

• github.com/golangci/golangci-lint/v2 v2.12.2

Makefile (1)

• gotest.tools/gotestsum v1.13.0

postgres/Dockerfile (1)

• debian trixie-slim@sha256:b6e2a152f22a40ff69d92cb397223c906017e1391a73c952b588e51af8883bf8

postgres/Dockerfile (1)

• postgres 18.4

renovate-config (1)

.github/renovate.json (1)

• python 3.14

---

• Check this box to trigger a request for Renovate to run again on this repository