Dependency Dashboard

This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.

## Config Migration Needed

- [ ] Select this checkbox to let Renovate create an automated Config Migration PR.

## Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

- [ ] chore(deps): update renovatebot/github-action action to v46.3.1 (main)
- [ ] fix(deps): update module golang.org/x/sync to v0.23.0 (main)
- [ ] fix(deps): update module golang.org/x/text to v0.42.0 (main)
- [ ] fix(deps): update module golang.org/x/tools to v0.50.0 (main)
- [ ] fix(deps): update module github.com/posener/complete to v2 (main)
- [ ] chore(deps): lock file maintenance (release-2.4)
- [ ] chore(deps): lock file maintenance (release-2.5)
- [ ] 🔐 **Create all rate-limited PRs at once** 🔐

## Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

- [ ] [chore(deps): update module github.com/containerd/containerd to v1.7.35 [security] (main)](../pull/352)
- [ ] [chore(deps): lock file maintenance (main)](../pull/358)
- [ ] [chore(deps): update github/codeql-action digest to b96794f (main)](../pull/359)
- [ ] [fix(deps): update module github.com/kubernetes-sigs/kro to v0.9.4 (main)](../pull/348)
- [ ] [chore(deps): update dependency renovate to v44.83.3 (main)](../pull/360)
- [ ] [fix(deps): update module github.com/docker/cli to v29.8.0+incompatible (main)](../pull/361)
- [ ] [fix(deps): update module github.com/moby/moby/api to v1.56.0 (main)](../pull/362)
- [ ] [fix(deps): update module github.com/moby/moby/client to v0.6.0 (main)](../pull/363)
- [ ] [fix(deps): update module golang.org/x/mod to v0.41.0 (main)](../pull/364)
- [ ] [fix(deps): update module helm.sh/helm/v3 to v3.22.0 (main)](../pull/294)
- [ ] [fix(deps): update module helm.sh/helm/v3 to v4 (main)](../pull/329)
- [ ] **Click on this checkbox to rebase all open PRs at once**

## PR Closed (Blocked)

The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.

- [ ] [fix(deps): update module github.com/google/ko to v0.19.1 (main)](../pull/281)

## Detected Dependencies

Branch main

github-actions (8)

.github/workflows/backport.yml (3)

- `actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `korthout/backport-action v4.6.0@2e830a1d0b8269505846ddd407a70876913ad1f8`
- `ubuntu 24.04`

.github/workflows/ci.yml (32)

- `actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `cachix/install-nix-action v31@13d8dd58da0234aa297dedd986986ccb8e7f3e24`
- `cachix/cachix-action v17@38b082610b782e7e93e209c35fd730d399dee866`
- `actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `cachix/install-nix-action v31@13d8dd58da0234aa297dedd986986ccb8e7f3e24`
- `cachix/cachix-action v17@38b082610b782e7e93e209c35fd730d399dee866`
- `actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `cachix/install-nix-action v31@13d8dd58da0234aa297dedd986986ccb8e7f3e24`
- `cachix/cachix-action v17@38b082610b782e7e93e209c35fd730d399dee866`
- `nicknovitski/nix-develop v1@9be7cfb4b10451d3390a75dc18ad0465bed4932a`
- `github/codeql-action v4@cdf488f595d80d6e07e03d4674febd5ab45fa938` → [Updates: `v4`]
- `github/codeql-action v4@cdf488f595d80d6e07e03d4674febd5ab45fa938` → [Updates: `v4`]
- `actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `cachix/install-nix-action v31@13d8dd58da0234aa297dedd986986ccb8e7f3e24`
- `cachix/cachix-action v17@38b082610b782e7e93e209c35fd730d399dee866`
- `codecov/codecov-action v7@fb8b3582c8e4def4969c97caa2f19720cb33a72f`
- `jlumbroso/free-disk-space v1.3.1@54081f138730dfa15788a46383842cd2f914a1be`
- `actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `cachix/install-nix-action v31@13d8dd58da0234aa297dedd986986ccb8e7f3e24`
- `cachix/cachix-action v17@38b082610b782e7e93e209c35fd730d399dee866`
- `actions/upload-artifact v7@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a`
- `actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `actions/download-artifact v8@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c`
- `vale-cli/vale-action v3.0.0@518a9136acc6e6668ce7c00d367051e0941e87ff`
- `actions/create-github-app-token v3@bcd2ba49218906704ab6c1aa796996da409d3eb1`
- `peter-evans/create-pull-request v8@5f6978faf089d4d20b00c7766989d076bb2fc7f1`
- `ubuntu 24.04`
- `ubuntu 24.04`
- `ubuntu 24.04`
- `ubuntu 24.04`
- `ubuntu 24.04`
- `ubuntu 24.04`

.github/workflows/commands.yml (7)

- `xt0rted/slash-command-action v2@bf51f8f5f4ea3d58abc7eca58f77104182b23e88`
- `actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `korthout/backport-action v4.6.0@2e830a1d0b8269505846ddd407a70876913ad1f8`
- `xt0rted/slash-command-action v2@bf51f8f5f4ea3d58abc7eca58f77104182b23e88`
- `actions-ecosystem/action-remove-labels v1@2ce5d41b4b6aa8503e285553f75ed56e0a40bae0`
- `ubuntu 24.04`
- `ubuntu 24.04`

.github/workflows/pr.yml (2)

- `mheap/require-checklist-action v2@9c8100a52aa9726d4648e61aa92415f6c843c990`
- `ubuntu 24.04`

.github/workflows/promote.yml (4)

- `actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `cachix/install-nix-action v31@13d8dd58da0234aa297dedd986986ccb8e7f3e24`
- `cachix/cachix-action v17@38b082610b782e7e93e209c35fd730d399dee866`
- `ubuntu 24.04`

.github/workflows/renovate.yml (3)

- `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `actions/create-github-app-token v3@bcd2ba49218906704ab6c1aa796996da409d3eb1`
- `renovatebot/github-action v46.2.6@37beffda261423addd537c33f2d126df7f6ffbab` → [Updates: `v46.3.1`]

.github/workflows/stale.yml (2)

- `actions/stale v11@4391f3da665fdf50b6810c1a66712fb9ba21aa93`
- `ubuntu 24.04`

.github/workflows/tag.yml (3)

- `actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `negz/create-tag v2@8dce6c9d9b12d161abe01c02d2b03f19e2e9e9bb`
- `ubuntu 24.04`

gomod (1)

go.mod (41)

- `go 1.26.0`
- `charm.land/bubbles/v2 v2.2.1`
- `charm.land/bubbletea/v2 v2.0.9`
- `charm.land/glamour/v2 v2.0.1`
- `charm.land/lipgloss/v2 v2.0.6`
- `dario.cat/mergo v1.0.2`
- `github.com/Masterminds/semver/v3 v3.5.0`
- `github.com/alecthomas/kong v1.16.1`
- `github.com/charmbracelet/x/term v0.2.2`
- `github.com/containerd/errdefs v1.0.0`
- `github.com/crossplane/crossplane-runtime/v2 v2.4.0`
- `github.com/crossplane/crossplane/apis/v2 v2.4.0`
- `github.com/crossplane/function-sdk-go v0.7.1`
- `github.com/docker/cli v29.7.2+incompatible` → [Updates: `v29.8.0+incompatible`]
- `github.com/emicklei/dot v1.11.0`
- `github.com/getkin/kin-openapi v0.149.0`
- `github.com/go-git/go-billy/v5 v5.9.1`
- `github.com/go-git/go-git/v5 v5.19.2`
- `github.com/gobuffalo/flect v1.0.3`
- `github.com/google/go-cmp v0.7.0`
- `github.com/google/go-containerregistry v0.22.1`
- `github.com/google/ko v0.18.1` → [Updates: `v0.19.1`]
- `github.com/invopop/jsonschema v0.14.0`
- `github.com/kubernetes-sigs/kro v0.9.2` → [Updates: `v0.9.4`]
- `github.com/moby/moby/api v1.55.0` → [Updates: `v1.56.0`]
- `github.com/moby/moby/client v0.5.1` → [Updates: `v0.6.0`]
- `github.com/muesli/termenv v0.16.0`
- `github.com/oapi-codegen/oapi-codegen/v2 v2.8.0`
- `github.com/pkg/errors v0.9.1`
- `github.com/posener/complete v1.2.3` → [Updates: `v2.1.0`]
- `github.com/spf13/afero v1.15.0`
- `github.com/willabides/kongplete v0.4.0`
- `golang.org/x/mod v0.40.0` → [Updates: `v0.41.0`]
- `golang.org/x/sync v0.22.0` → [Updates: `v0.23.0`]
- `golang.org/x/text v0.41.0` → [Updates: `v0.42.0`]
- `golang.org/x/tools v0.49.0` → [Updates: `v0.50.0`]
- `google.golang.org/grpc v1.83.2`
- `google.golang.org/protobuf v1.36.12`
- `gopkg.in/yaml.v3 v3.0.1`
- `helm.sh/helm/v3 v3.20.2` → [Updates: `v3.22.0`, `v4.3.0`]
- `github.com/containerd/containerd v1.7.33` → [Updates: `v1.7.35`]

nix (1)

flake.nix (2)

- `nixpkgs nixos-26.05`
- `nixpkgs-unstable nixpkgs-unstable`

regex (2)

.github/workflows/renovate.yml (1)

- `renovate 44.75.2` → [Updates: `44.83.3`]

.github/workflows/renovate.yml (1)

- `renovate 44.75.2` → [Updates: `44.83.3`]

Branch release-2.4

github-actions (8)

.github/workflows/backport.yml

.github/workflows/ci.yml

.github/workflows/commands.yml

.github/workflows/pr.yml

.github/workflows/promote.yml

.github/workflows/renovate.yml

.github/workflows/stale.yml

.github/workflows/tag.yml

gomod (1)

go.mod (1)

- `github.com/docker/docker v28.5.2+incompatible`

nix (1)

flake.nix

regex (2)

.github/workflows/renovate.yml

.github/workflows/renovate.yml

Branch release-2.5

github-actions (8)

.github/workflows/backport.yml

.github/workflows/ci.yml

.github/workflows/commands.yml

.github/workflows/pr.yml

.github/workflows/promote.yml

.github/workflows/renovate.yml

.github/workflows/stale.yml

.github/workflows/tag.yml

gomod (1)

go.mod (1)

- `github.com/docker/docker v28.5.2+incompatible`

nix (1)

flake.nix

regex (2)

.github/workflows/renovate.yml

.github/workflows/renovate.yml