Dependency Dashboard

This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.
[View this repository on the Mend.io Web Portal](https://developer.mend.io/github/crossplane-contrib/function-patch-and-transform).

## Pending Approval

The following branches are pending approval. To create them, click on a checkbox below.

- [ ] fix(deps): update module github.com/crossplane/crossplane-runtime/v2 to v2.4.0
- [ ] fix(deps): update module github.com/crossplane/crossplane/apis/v2 to v2.4.0
- [ ] fix(deps): update module sigs.k8s.io/controller-tools to v0.22.0
- [ ] 🔐 **Create all pending approval PRs at once** 🔐

## Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

- [ ] fix(deps): update module github.com/crossplane/crossplane/apis/v2 to v2.3.5
- [ ] chore(deps): update dependency docker/buildx to v0.37.1
- [ ] chore(deps): update dependency golangci/golangci-lint to v2.13.2
- [ ] chore(deps): update examples (`xpkg.upbound.io/crossplane-contrib/function-go-templating`, `xpkg.upbound.io/crossplane-contrib/function-patch-and-transform`)
- [ ] chore(deps): update dependency crossplane/cli to v2
- [ ] chore(deps): update negz/create-tag action to v2
- [ ] 🔐 **Create all rate-limited PRs at once** 🔐

## Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

- [ ] [chore(deps): update module golang.org/x/mod to v0.40.0 [security]](../pull/346)
- [ ] [chore(deps): pin dependencies](../pull/340) (`actions/checkout`, `actions/download-artifact`, `actions/setup-go`, `actions/upload-artifact`, `docker/build-push-action`, `docker/login-action`, `docker/setup-buildx-action`, `docker/setup-qemu-action`, `golangci/golangci-lint-action`)
- [ ] [chore(deps): update dependency go to v1.25.14](../pull/347)
- [ ] [fix(deps): update module github.com/crossplane/crossplane-runtime/v2 to v2.3.4](../pull/351)
- [ ] [chore(deps): update dependency go to v1.27.1](../pull/344)
- [ ] [fix(deps): update kubernetes monorepo to v0.37.0](../pull/307) (`k8s.io/api`, `k8s.io/apiextensions-apiserver`, `k8s.io/apimachinery`)
- [ ] **Click on this checkbox to rebase all open PRs at once**

## Detected Dependencies

crossplane (2)

example/functions.yaml (1)

- `xpkg.upbound.io/crossplane-contrib/function-patch-and-transform v0.1.4` → [Updates: `v0.10.9`]

example/multistep/functions.yaml (2)

- `xpkg.upbound.io/crossplane-contrib/function-patch-and-transform v0.5.0` → [Updates: `v0.10.9`]
- `xpkg.upbound.io/crossplane-contrib/function-go-templating v0.4.1` → [Updates: `v0.12.4`]

dockerfile (1)

Dockerfile (2)

- `docker/dockerfile 1`
- `golang 1`

github-actions (2)

.github/workflows/ci.yml (18)

- `actions/checkout v7` → [Updates: `v7`]
- `actions/setup-go v7` → [Updates: `v7`]
- `golangci/golangci-lint-action v9` → [Updates: `v9`]
- `actions/checkout v7` → [Updates: `v7`]
- `actions/setup-go v7` → [Updates: `v7`]
- `docker/setup-qemu-action v4` → [Updates: `v4`]
- `docker/setup-buildx-action v4` → [Updates: `v4`]
- `actions/checkout v7` → [Updates: `v7`]
- `docker/build-push-action v7` → [Updates: `v7`]
- `actions/upload-artifact v7` → [Updates: `v7`]
- `actions/checkout v7` → [Updates: `v7`]
- `actions/download-artifact v8` → [Updates: `v8`]
- `docker/login-action v4` → [Updates: `v4`]
- `docker/login-action v4.6.0` → [Updates: `v4.6.0`]
- `ubuntu 24.04`
- `ubuntu 24.04`
- `ubuntu 24.04`
- `ubuntu 24.04`

.github/workflows/tag.yml (2)

- `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `negz/create-tag v1@39bae1e0932567a58c20dea5a1a0d18358503320` → [Updates: `v2`]

gomod (1)

go.mod (14)

- `go 1.25.13` → [Updates: `1.25.14`, `1.27.1`]
- `github.com/alecthomas/kong v1.16.0` → [Updates: `v1.16.1`]
- `github.com/crossplane/crossplane-runtime/v2 v2.3.3` → [Updates: `v2.3.4`, `v2.4.0`]
- `github.com/crossplane/crossplane/apis/v2 v2.3.4` → [Updates: `v2.3.5`, `v2.4.0`]
- `github.com/crossplane/function-sdk-go v0.7.1`
- `github.com/google/go-cmp v0.7.0`
- `github.com/pkg/errors v0.9.1`
- `google.golang.org/protobuf v1.36.11` → [Updates: `v1.36.12`]
- `k8s.io/api v0.35.3` → [Updates: `v0.37.0`]
- `k8s.io/apiextensions-apiserver v0.35.3` → [Updates: `v0.37.0`]
- `k8s.io/apimachinery v0.35.3` → [Updates: `v0.37.0`]
- `k8s.io/utils v0.0.0-20260707023825-cf1189d6abe3@cf1189d6abe3`
- `sigs.k8s.io/controller-tools v0.20.1` → [Updates: `v0.22.0`]
- `golang.org/x/mod v0.38.0` → [Updates: `v0.40.0`]

regex (5)

.github/workflows/ci.yml (1)

- `go 1.25.13` → [Updates: `1.25.14`, `1.27.1`]

.github/workflows/ci.yml (1)

- `golangci/golangci-lint v2.4.0` → [Updates: `v2.13.2`]

.github/workflows/ci.yml (1)

- `docker/buildx v0.36.1` → [Updates: `v0.37.1`]

.github/workflows/ci.yml (1)

- `crossplane/cli ' # TODO(negz): Pin to a version once v1.14 is released.` → [Updates: `v2.5.0`]

Dockerfile

---

- [ ] Check this box to trigger a request for Renovate to run again on this repository