Dependency Dashboard

This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.
[View this repository on the Mend.io Web Portal](https://developer.mend.io/github/apache/superset-kubernetes-operator).

## Abandoned Dependencies

The following dependencies have not received updates for an extended period and may be unmaintained.

View abandoned dependencies (37)

> [!NOTE]
Packages are marked as abandoned when they exceed the [`abandonmentThreshold`](https://docs.renovatebot.com/configuration-options/#abandonmentthreshold) since their last release. Unlike deprecated packages with official notices, abandonment is detected by release inactivity.
>
| Datasource | Package | Last Updated |
|------------|------|-------------|
| github-actions | [amannn/action-semantic-pull-request](https://redirect.github.com/amannn/action-semantic-pull-request) | `2025-08-22` |
| gomod | [github.com/antlr4-go/antlr/v4](https://redirect.github.com/antlr4-go/antlr) | `2024-05-15` |
| gomod | [github.com/beorn7/perks](https://redirect.github.com/beorn7/perks) | `2019-07-31` |
| gomod | [github.com/blang/semver/v4](https://redirect.github.com/blang/semver) | `2020-05-24` |
| gomod | [github.com/cespare/xxhash/v2](https://redirect.github.com/cespare/xxhash) | `2024-04-04` |
| gomod | [github.com/davecgh/go-spew](https://redirect.github.com/davecgh/go-spew) | `2018-02-21` |
| gomod | [github.com/emicklei/go-restful/v3](https://redirect.github.com/emicklei/go-restful) | `2025-08-15` |
| gomod | [github.com/evanphx/json-patch/v5](https://redirect.github.com/evanphx/json-patch) | `2025-01-28` |
| gomod | [github.com/go-logr/stdr](https://redirect.github.com/go-logr/stdr) | `2021-12-15` |
| gomod | [github.com/go-logr/zapr](https://redirect.github.com/go-logr/zapr) | `2023-11-03` |
| gomod | [github.com/go-task/slim-sprig/v3](https://redirect.github.com/go-task/slim-sprig) | `2023-09-14` |
| gomod | [github.com/google/go-cmp](https://redirect.github.com/google/go-cmp) | `2025-02-21` |
| gomod | [github.com/google/uuid](https://redirect.github.com/google/uuid) | `2024-01-23` |
| gomod | [github.com/inconshreveable/mousetrap](https://redirect.github.com/inconshreveable/mousetrap) | `2022-11-27` |
| gomod | [github.com/json-iterator/go](https://redirect.github.com/json-iterator/go) | `2021-09-11` |
| gomod | [github.com/modern-go/concurrent](https://redirect.github.com/modern-go/concurrent) | `2018-03-06` |
| gomod | [github.com/modern-go/reflect2](https://redirect.github.com/modern-go/reflect2) | `2021-09-11` |
| gomod | [github.com/munnerz/goautoneg](https://redirect.github.com/munnerz/goautoneg) | `2019-10-10` |
| gomod | [github.com/pmezard/go-difflib](https://redirect.github.com/pmezard/go-difflib) | `2016-01-10` |
| gomod | [github.com/spf13/pflag](https://redirect.github.com/spf13/pflag) | `2025-09-02` |
| gomod | [github.com/x448/float16](https://redirect.github.com/x448/float16) | `2020-01-17` |
| gomod | [go.uber.org/multierr](https://redirect.github.com/uber-go/multierr) | `2023-03-29` |
| gomod | [gopkg.in/evanphx/json-patch.v4](https://gopkg.in/evanphx/json-patch.v4) | `2025-01-28` |
| gomod | [gopkg.in/inf.v0](https://redirect.github.com/go-inf/inf) | `2018-03-26` |
| gomod | [sigs.k8s.io/randfill](https://redirect.github.com/kubernetes-sigs/randfill) | `2025-03-04` |
| gomod | [sigs.k8s.io/yaml](https://redirect.github.com/kubernetes-sigs/yaml) | `2025-07-24` |
| pip_requirements | [colorama](https://redirect.github.com/tartley/colorama) | `2022-10-25` |
| pip_requirements | [ghp-import](https://redirect.github.com/c-w/ghp-import) | `2022-05-02` |
| pip_requirements | [jinja2](https://redirect.github.com/pallets/jinja) | `2025-03-05` |
| pip_requirements | [mergedeep](https://redirect.github.com/clarketm/mergedeep) | `2021-02-05` |
| pip_requirements | [mkdocs-material-extensions](https://redirect.github.com/facelessuser/mkdocs-material-extensions) | `2023-11-22` |
| pip_requirements | [paginate](https://redirect.github.com/Signum/paginate) | `2024-08-25` |
| pip_requirements | [python-dateutil](https://redirect.github.com/dateutil/dateutil) | `2024-03-01` |
| pip_requirements | [pyyaml-env-tag](https://redirect.github.com/waylan/pyyaml-env-tag) | `2025-05-13` |
| pip_requirements | [six](https://redirect.github.com/benjaminp/six) | `2024-12-04` |
| pip_requirements | [watchdog](https://redirect.github.com/gorakhargosh/watchdog) | `2024-11-01` |
| regex | [github.com/norwoodj/helm-docs](https://redirect.github.com/norwoodj/helm-docs) | `2024-07-08` |

## Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

- [ ] chore(deps): update gcr.io/distroless/static:nonroot docker digest to e2e927e
- [ ] fix(deps): update go dependencies (`github.com/onsi/ginkgo/v2`, `golang.org/x/exp`, `golang.org/x/net`, `golang.org/x/term`, `golang.org/x/text`, `golang.org/x/tools`, `google.golang.org/genproto/googleapis/api`, `google.golang.org/genproto/googleapis/rpc`, `k8s.io/kube-openapi`, `sigs.k8s.io/controller-runtime`, `sigs.k8s.io/json`)

## Other Branches

The following updates are pending. To force the creation of a PR, click on a checkbox below.

- [ ] chore(deps): update dependency rvben/rumdl to v0.2.67

## PR Closed (Blocked)

The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.

- [ ] [chore(deps): update dependency click to v8.5.0](../pull/337)
- [ ] [chore(deps): update docker/setup-buildx-action action to v4.3.0](../pull/289)
- [ ] [chore(deps): update sigstore/cosign-installer action to v4.1.2](../pull/88)

## Detected Dependencies

devcontainer (1)

.devcontainer/devcontainer.json (3)

- `golang 1.27.1@sha256:f44f6e88636cfb311f9ebace870ded69d943f227bb3cb27d32ffd84ea18c43ea`
- `ghcr.io/devcontainers/features/docker-in-docker 4`
- `ghcr.io/devcontainers/features/git 1`

dockerfile (1)

Dockerfile (2)

- `golang 1.27.1@sha256:f44f6e88636cfb311f9ebace870ded69d943f227bb3cb27d32ffd84ea18c43ea`
- `gcr.io/distroless/static nonroot@sha256:1c2c046bc09ed40fad370b599a0b1ae7987f55b01e247cf27a7c27cd97e5bbc7` → [Updates: `nonroot`]

github-actions (11)

.github/workflows/ci.yaml (13)

- `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `actions/setup-go v7.0.0@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e`
- `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `actions/setup-go v7.0.0@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e`
- `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `actions/setup-go v7.0.0@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e`
- `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `lhotari/sandboxed-trivy-action v1@f01374b6cc3bf7264ab238293e94f6db7ada6dd0`
- `github/codeql-action v4@b96794f015dfd88f77b49b1c93e0fa7110f94c63`
- `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `actions/setup-go v7.0.0@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e`

.github/workflows/codeql.yml (4)

- `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `actions/setup-go v7.0.0@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e`
- `github/codeql-action v4@b96794f015dfd88f77b49b1c93e0fa7110f94c63`
- `github/codeql-action v4@b96794f015dfd88f77b49b1c93e0fa7110f94c63`

.github/workflows/docs.yml (6)

- `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `actions/setup-python v7.0.0@5fda3b95a4ea91299a34e894583c3862153e4b97`
- `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `actions/setup-python v7.0.0@5fda3b95a4ea91299a34e894583c3862153e4b97`
- `python 3.14`
- `python 3.14`

.github/workflows/fuzz.yaml (3)

- `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `actions/setup-go v7.0.0@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e`
- `actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a`

.github/workflows/license.yml (2)

- `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `actions/setup-java v6.0.1@de7274f081f381c8f8158605e0321c36c376e2e6`

.github/workflows/pr.yaml (1)

- `amannn/action-semantic-pull-request v6.1.1@48f256284bd46cdaab1048c3721360e808335d50`

.github/workflows/release.yml (7)

- `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `docker/setup-buildx-action v4.2.0@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c` → [Updates: `v4.3.0`]
- `docker/login-action v4.6.0@dbcb813823bdd20940b903addbd779551569679f`
- `docker/metadata-action v6.2.0@dc802804100637a589fabce1cb79ff13a1411302`
- `docker/build-push-action v7.3.0@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a`
- `sigstore/cosign-installer v4.0.0@faadad0cce49287aee09b3a48701e75088a2c6ad` → [Updates: `v4.1.2`]

.github/workflows/scorecard.yml (3)

- `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `ossf/scorecard-action v2.4.4@2d1146689b8cda280b9bc96326124645441f03bc`
- `github/codeql-action v4@b96794f015dfd88f77b49b1c93e0fa7110f94c63`

.github/workflows/sync-supported-k8s.yaml (2)

- `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `peter-evans/create-pull-request v8.1.1@5f6978faf089d4d20b00c7766989d076bb2fc7f1`

.github/workflows/sync-tool-checksums.yaml (2)

- `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `peter-evans/create-pull-request v8.1.1@5f6978faf089d4d20b00c7766989d076bb2fc7f1`

.github/workflows/test.yaml (9)

- `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `actions/setup-go v7.0.0@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e`
- `codecov/codecov-action v7@fb8b3582c8e4def4969c97caa2f19720cb33a72f`
- `codecov/codecov-action v7@fb8b3582c8e4def4969c97caa2f19720cb33a72f`
- `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `actions/setup-go v7.0.0@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e`
- `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `actions/setup-go v7.0.0@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e`

gomod (1)

go.mod (102)

- `github.com/adhocore/gronx v1.20.3`
- `github.com/onsi/ginkgo/v2 v2.32.1` → [Updates: `v2.32.2`]
- `github.com/onsi/gomega v1.43.0`
- `github.com/stretchr/testify v1.12.1`
- `k8s.io/api v0.37.0`
- `k8s.io/apiextensions-apiserver v0.37.0`
- `k8s.io/apimachinery v0.37.0`
- `k8s.io/client-go v0.37.0`
- `sigs.k8s.io/controller-runtime v0.25.0` → [Updates: `v0.25.1`]
- `sigs.k8s.io/gateway-api v1.6.2`
- `sigs.k8s.io/yaml v1.6.0`
- `cel.dev/expr v0.25.3`
- `github.com/Masterminds/semver/v3 v3.5.0`
- `github.com/antlr4-go/antlr/v4 v4.13.1`
- `github.com/beorn7/perks v1.0.1`
- `github.com/blang/semver/v4 v4.0.0`
- `github.com/cenkalti/backoff/v5 v5.0.3` → [Updates: `v7.0.0`]
- `github.com/cespare/xxhash/v2 v2.3.0`
- `github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc@d8f796af33cc`
- `github.com/emicklei/go-restful/v3 v3.13.0`
- `github.com/evanphx/json-patch v5.9.11+incompatible`
- `github.com/evanphx/json-patch/v5 v5.9.11`
- `github.com/felixge/httpsnoop v1.1.0`
- `github.com/fsnotify/fsnotify v1.10.1`
- `github.com/fxamacker/cbor/v2 v2.9.3`
- `github.com/go-logr/logr v1.4.4`
- `github.com/go-logr/stdr v1.2.2`
- `github.com/go-logr/zapr v1.3.0`
- `github.com/go-openapi/jsonpointer v1.0.1`
- `github.com/go-openapi/jsonreference v1.0.2`
- `github.com/go-openapi/swag v0.29.2`
- `github.com/go-openapi/swag/cmdutils v0.29.2`
- `github.com/go-openapi/swag/conv v0.29.2`
- `github.com/go-openapi/swag/fileutils v0.29.2`
- `github.com/go-openapi/swag/jsonutils v0.29.2`
- `github.com/go-openapi/swag/loading v0.29.2`
- `github.com/go-openapi/swag/mangling v0.29.2`
- `github.com/go-openapi/swag/netutils v0.29.2`
- `github.com/go-openapi/swag/pools v0.29.2`
- `github.com/go-openapi/swag/stringutils v0.29.2`
- `github.com/go-openapi/swag/typeutils v0.29.2`
- `github.com/go-openapi/swag/yamlutils v0.29.2`
- `github.com/go-task/slim-sprig/v3 v3.0.0`
- `github.com/google/cel-go v0.31.0`
- `github.com/google/gnostic-models v0.7.1`
- `github.com/google/go-cmp v0.7.0`
- `github.com/google/pprof v0.0.0-20260906184651-6331bc6350fe@6331bc6350fe`
- `github.com/google/uuid v1.6.0`
- `github.com/grpc-ecosystem/grpc-gateway/v2 v2.30.0`
- `github.com/inconshreveable/mousetrap v1.1.0`
- `github.com/json-iterator/go v1.1.12`
- `github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd@bacd9c7ef1dd`
- `github.com/modern-go/reflect2 v1.0.3-0.20250322232337-35a7c28c31ee@35a7c28c31ee`
- `github.com/munnerz/goautoneg v0.0.0-20191010083416-a7dc8b61c822@a7dc8b61c822`
- `github.com/pmezard/go-difflib v1.0.1-0.20181226105442-5d4384ee4fb2@5d4384ee4fb2`
- `github.com/prometheus/client_golang v1.24.1`
- `github.com/prometheus/client_model v0.6.3`
- `github.com/prometheus/common v0.71.0`
- `github.com/prometheus/procfs v0.22.0`
- `github.com/spf13/cobra v1.10.2`
- `github.com/spf13/pflag v1.0.10`
- `github.com/x448/float16 v0.8.4`
- `go.opentelemetry.io/auto/sdk v1.2.1`
- `go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.71.0`
- `go.opentelemetry.io/otel v1.46.0`
- `go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.46.0`
- `go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.46.0`
- `go.opentelemetry.io/otel/metric v1.46.0`
- `go.opentelemetry.io/otel/sdk v1.46.0`
- `go.opentelemetry.io/otel/trace v1.46.0`
- `go.opentelemetry.io/proto/otlp v1.11.0`
- `go.uber.org/multierr v1.11.0`
- `go.uber.org/zap v1.28.0`
- `go.yaml.in/yaml/v2 v2.4.4` → [Updates: `v3.0.5`]
- `go.yaml.in/yaml/v3 v3.0.5`
- `golang.org/x/exp v0.0.0-20260824195058-e88cd73687aa@e88cd73687aa` → [Updates: `v0.0.0-20260908205506-85c1c2202aba`]
- `golang.org/x/mod v0.41.0`
- `golang.org/x/net v0.58.0` → [Updates: `v0.59.0`]
- `golang.org/x/oauth2 v0.37.0`
- `golang.org/x/sync v0.23.0`
- `golang.org/x/sys v0.48.0`
- `golang.org/x/term v0.45.0` → [Updates: `v0.46.0`]
- `golang.org/x/text v0.41.0` → [Updates: `v0.42.0`]
- `golang.org/x/time v0.16.0`
- `golang.org/x/tools v0.49.0` → [Updates: `v0.50.0`]
- `gomodules.xyz/jsonpatch/v2 v2.5.0` → [Updates: `v3.0.1`]
- `google.golang.org/genproto/googleapis/api v0.0.0-20260819154853-08b0e4226688@08b0e4226688` → [Updates: `v0.0.0-20260911204522-f61a6ca850bd`]
- `google.golang.org/genproto/googleapis/rpc v0.0.0-20260819154853-08b0e4226688@08b0e4226688` → [Updates: `v0.0.0-20260911204522-f61a6ca850bd`]
- `google.golang.org/grpc v1.83.2`
- `google.golang.org/protobuf v1.36.12`
- `gopkg.in/evanphx/json-patch.v4 v4.13.0` → [Updates: `v5.9.11`]
- `gopkg.in/inf.v0 v0.9.1`
- `k8s.io/apiserver v0.37.0`
- `k8s.io/component-base v0.37.0`
- `k8s.io/klog/v2 v2.140.0`
- `k8s.io/kube-openapi v0.0.0-20260821135717-be32def86098@be32def86098` → [Updates: `v0.0.0-20260911184034-7970a1e230da`]
- `k8s.io/streaming v0.37.0`
- `k8s.io/utils v0.0.0-20260707023825-cf1189d6abe3@cf1189d6abe3`
- `sigs.k8s.io/apiserver-network-proxy/konnectivity-client v0.36.0`
- `sigs.k8s.io/json v0.0.0-20250730193827-2d320260d730@2d320260d730` → [Updates: `v0.0.0-20260909141634-11ed52e25bc5`]
- `sigs.k8s.io/randfill v1.0.0`
- `sigs.k8s.io/structured-merge-diff/v6 v6.4.2` → [Updates: `v7.0.0`]

helm-values (1)

charts/superset-operator/values.yaml

kustomize (1)

config/manager/kustomization.yaml

pip_requirements (1)

docs-requirements.txt (29)

- `babel ==2.18.0`
- `backrefs ==8.0`
- `certifi ==2026.7.22`
- `charset-normalizer ==3.5.1`
- `click ==8.4.2` → [Updates: `==8.5.0`]
- `colorama ==0.4.6`
- `ghp-import ==2.1.0`
- `idna ==3.19`
- `jinja2 ==3.1.6`
- `Markdown ==3.10.3`
- `markupsafe ==3.0.3`
- `mergedeep ==1.3.4`
- `mkdocs ==1.6.1`
- `mkdocs-get-deps ==0.2.2`
- `mkdocs-material ==9.7.7`
- `mkdocs-material-extensions ==1.3.1`
- `packaging ==26.3`
- `paginate ==0.5.7`
- `pathspec ==1.1.1`
- `platformdirs ==4.11.8`
- `Pygments ==2.21.0`
- `pymdown-extensions ==11.0.2`
- `python-dateutil ==2.9.0.post0`
- `pyyaml ==6.0.3`
- `pyyaml-env-tag ==1.1`
- `requests ==2.34.2`
- `six ==1.17.0`
- `urllib3 ==2.7.0`
- `watchdog ==6.0.0`

regex (9)

.devcontainer/post-install.sh (2)

- `kubernetes/kubernetes v1.37.0`
- `kubernetes-sigs/kubebuilder v4.16.0`

.github/supported-k8s.json (1)

- `kubernetes-sigs/kind v0.33.0`

go.mod (1)

- `golang 1.27.1`

Makefile (9)

- `operator-framework/operator-sdk v1.42.3`
- `sigs.k8s.io/kustomize/kustomize/v5 v5.8.1`
- `sigs.k8s.io/controller-tools v0.22.0`
- `golangci/golangci-lint v2.13.2`
- `github.com/elastic/crd-ref-docs v0.3.0`
- `golang.org/x/vuln v1.8.0`
- `rvben/rumdl v0.2.64` → [Updates: `v0.2.67`]
- `github.com/norwoodj/helm-docs v1.14.2`
- `operator-framework/operator-registry v1.74.0`

PROJECT (1)

- `kubernetes-sigs/kubebuilder v4.16.0`

scripts/install-helm-unittest.sh (1)

- `helm-unittest/helm-unittest v1.1.2`

scripts/install-helm.sh (1)

- `helm/helm v4.3.0`

scripts/install-oras.sh (1)

- `oras-project/oras v1.3.4@f27adb935022d94df8dc77719c322dda592c78a0d57a6f7dcdd8d900b248c454`

scripts/install-yq.sh (1)

- `mikefarah/yq v4.53.6@c5f056448f973ae7d39b5401949648a78f2dc1947d6a8eb65be60d5c504b9385`

---

- [ ] Check this box to trigger a request for Renovate to run again on this repository

Start with the linked Renovate Dependency Dashboard documentation, then inspect go.mod, Dockerfile, .devcontainer/devcontainer.json, and the listed .github/workflows files. The issue contains pending, blocked, and abandoned dependency updates rather than a single requested change, so identify a specific update and verify its status checks before considering it done.

Written by the indexing model from the issue text.