Dependency Dashboard

This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.
[View this repository on the Mend.io Web Portal](https://developer.mend.io/github/GoogleCloudPlatform/cloud-sql-proxy-operator).

## Config Migration Needed

- [ ] Select this checkbox to let Renovate create an automated Config Migration PR.

## Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

- [ ] deps: Update gcr.io/cloud-sql-connectors/cloud-sql-proxy Docker tag to v2.25.4
- [ ] deps: Update Terraform google to v8
- [ ] deps: Update Terraform google-beta to v8
- [ ] 🔐 **Create all rate-limited PRs at once** 🔐

## Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

- [ ] [deps: Update gcr.io/distroless/static:nonroot Docker digest to 2293b36](../pull/795)
- [ ] [deps: Update Go dependency updates](../pull/799) (`cloud.google.com/go/cloudsqlconn`, `k8s.io/api`, `k8s.io/apimachinery`)
- [ ] [deps: Update Build Tools](../pull/735) (`cert-manager/cert-manager`, `github.com/elastic/crd-ref-docs`, `hashicorp/terraform`)
- [ ] [deps: Update Github Actions](../pull/645) (`actions/checkout`, `actions/setup-go`, `actions/upload-artifact`, `docker/setup-buildx-action`, `docker/setup-qemu-action`, `github/codeql-action`, `go`, `ossf/scorecard-action`)
- [ ] [deps: Update Kubernetes Runtime](../pull/646) (`k8s.io/client-go`, `kubernetes/kubernetes`, `sigs.k8s.io/controller-runtime`, `sigs.k8s.io/controller-tools`)
- [ ] [deps: Update module github.com/golangci/golangci-lint/cmd/golangci-lint to v2.13.2](../pull/800)
- [ ] [deps: Update Terraform google to v7.46.1](../pull/734)
- [ ] [deps: Update Github Actions to v7](../pull/777) (`actions/checkout`, `actions/setup-go`)
- [ ] **Click on this checkbox to rebase all open PRs at once**

## Detected Dependencies

dockerfile (2)

Dockerfile (1)

- `gcr.io/distroless/static nonroot@sha256:23795be0fe67b7d47d1ee62b19c7db750152db627d5bbfa31307e892a7575bec` → [Updates: `nonroot`]

Dockerfile-operator (1)

- `gcr.io/distroless/static nonroot@sha256:23795be0fe67b7d47d1ee62b19c7db750152db627d5bbfa31307e892a7575bec` → [Updates: `nonroot`]

github-actions (5)

.github/workflows/codeql.yml (6)

- `actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd` → [Updates: `v6.1.0`, `v7.0.1`]
- `actions/setup-go v6.3.0@4b73464bb391d4059bd26b0524d20df3927bd417` → [Updates: `v6.5.0`, `v7.0.0`]
- `github/codeql-action v4.32.6@0d579ffd059c29b07949a3cce3983f0780820c98` → [Updates: `v4.38.0`]
- `github/codeql-action v4.32.6@0d579ffd059c29b07949a3cce3983f0780820c98` → [Updates: `v4.38.0`]
- `github/codeql-action v4.32.6@0d579ffd059c29b07949a3cce3983f0780820c98` → [Updates: `v4.38.0`]
- `go 1.26` → [Updates: `1.27`]

.github/workflows/labels.yaml (2)

- `actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd` → [Updates: `v6.1.0`, `v7.0.1`]
- `micnncim/action-label-syncer v1.3.0@3abd5ab72fda571e69fffd97bd4e0033dd5f495c`

.github/workflows/scorecard.yml (4)

- `actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd` → [Updates: `v6.1.0`, `v7.0.1`]
- `ossf/scorecard-action v2.4.0@62b2cac7ed8198b15735ed49ab1e5cf35480ba46` → [Updates: `v2.4.4`]
- `actions/upload-artifact v7.0.0@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f` → [Updates: `v7.0.1`]
- `github/codeql-action v4.32.6@0d579ffd059c29b07949a3cce3983f0780820c98` → [Updates: `v4.38.0`]

.github/workflows/tests-main.yaml (12)

- `actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd` → [Updates: `v6.1.0`, `v7.0.1`]
- `google-github-actions/auth v3.0.0@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093`
- `actions/setup-go v6.3.0@4b73464bb391d4059bd26b0524d20df3927bd417` → [Updates: `v6.5.0`, `v7.0.0`]
- `actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd` → [Updates: `v6.1.0`, `v7.0.1`]
- `google-github-actions/auth v3.0.0@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093`
- `google-github-actions/get-secretmanager-secrets v3.0.0@bc9c54b29fdffb8a47776820a7d26e77b379d262`
- `google-github-actions/setup-gcloud v3.0.1@aa5489c8933f4cc7a4f7d45035b3b1440c9c10db`
- `actions/setup-go v6.3.0@4b73464bb391d4059bd26b0524d20df3927bd417` → [Updates: `v6.5.0`, `v7.0.0`]
- `docker/setup-qemu-action v4.0.0@ce360397dd3f832beb865e1373c09c0e9f86d70a` → [Updates: `v4.4.0`]
- `docker/setup-buildx-action v4.0.0@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd` → [Updates: `v4.4.1`]
- `go 1.26` → [Updates: `1.27`]
- `go 1.26` → [Updates: `1.27`]

.github/workflows/tests.yaml (11)

- `actions/setup-go v6.3.0@4b73464bb391d4059bd26b0524d20df3927bd417` → [Updates: `v6.5.0`, `v7.0.0`]
- `actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd` → [Updates: `v6.1.0`, `v7.0.1`]
- `actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd` → [Updates: `v6.1.0`, `v7.0.1`]
- `google-github-actions/auth v3.0.0@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093`
- `google-github-actions/get-secretmanager-secrets v3.0.0@bc9c54b29fdffb8a47776820a7d26e77b379d262`
- `google-github-actions/setup-gcloud v3.0.1@aa5489c8933f4cc7a4f7d45035b3b1440c9c10db`
- `actions/setup-go v6.3.0@4b73464bb391d4059bd26b0524d20df3927bd417` → [Updates: `v6.5.0`, `v7.0.0`]
- `docker/setup-qemu-action v4.0.0@ce360397dd3f832beb865e1373c09c0e9f86d70a` → [Updates: `v4.4.0`]
- `docker/setup-buildx-action v4.0.0@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd` → [Updates: `v4.4.1`]
- `go 1.26` → [Updates: `1.27`]
- `go 1.26` → [Updates: `1.27`]

gomod (1)

go.mod (9)

- `go 1.26.0`
- `cloud.google.com/go/cloudsqlconn v1.25.0` → [Updates: `v1.25.2`]
- `github.com/go-logr/logr v1.4.4`
- `go.uber.org/zap v1.28.0`
- `k8s.io/api v0.36.3` → [Updates: `v0.37.0`]
- `k8s.io/apimachinery v0.36.3` → [Updates: `v0.37.0`]
- `k8s.io/client-go v0.36.3` → [Updates: `v0.37.0`]
- `sigs.k8s.io/controller-runtime v0.24.1` → [Updates: `v0.25.1`]
- `sigs.k8s.io/yaml v1.6.0`

kustomize (1)

config/manager/kustomization.yaml

regex (2)

internal/workload/podspec_updates.go (1)

- `gcr.io/cloud-sql-connectors/cloud-sql-proxy 2.25.2` → [Updates: `2.25.4`]

Makefile (7)

- `cert-manager/cert-manager v1.19.2` → [Updates: `v1.21.2`]
- `kubernetes/kubernetes v1.32.2` → [Updates: `v1.37.0`]
- `hashicorp/terraform v1.14.3` → [Updates: `v1.16.3`]
- `sigs.k8s.io/controller-tools v0.17.3` → [Updates: `v0.22.0`]
- `github.com/elastic/crd-ref-docs v0.2.0` → [Updates: `v0.3.0`]
- `github.com/golangci/golangci-lint/cmd/golangci-lint v2.2.2` → [Updates: `v2.13.2`]
- `github.com/google/go-licenses/v2 v2.0.1`

terraform (2)

infra/permissions/main.tf (1)

- `google 7.16.0` → [Updates: `7.46.1`, `8.3.0`]

infra/resources/main.tf (2)

- `google 7.16.0` → [Updates: `7.46.1`, `8.3.0`]
- `google-beta 6.50.0` → [Updates: `8.3.0`]

---

- [ ] Check this box to trigger a request for Renovate to run again on this repository