Dependency Dashboard

This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.

## Repository Problems

Renovate tried to run on this repository, but found these problems.

- ⚠️ WARN: Package lookup failures

## Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

- [ ] fix(deps): update k8s.io/utils digest to cf1189d (main)

## Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

- [ ] chore(deps): update cachix/cachix-action digest to 38b0826 (main)
- [ ] chore(deps): update github/codeql-action digest to b96794f (main)
- [ ] chore(deps): update renovatebot/github-action action to v46.3.1 (main)
- [ ] fix(deps): update module github.com/crossplane/crossplane/apis/v2 to v2.4.0 (main)
- [ ] fix(deps): update module github.com/google/go-containerregistry to v0.22.1 (main)
- [ ] fix(deps): update module github.com/sigstore/cosign/v3 to v3.1.3 (main)
- [ ] fix(deps): update module github.com/sirupsen/logrus to v1.10.2 (main)
- [ ] fix(deps): update module golang.org/x/time to v0.16.0 (main)
- [ ] chore(deps): update actions/stale action to v11 (main)
- [ ] chore(deps): update negz/create-tag action to v2 (main)
- [ ] chore(deps): update curlimages/curl docker tag to v8.22.0 (release-1.20)
- [ ] chore(deps): lock file maintenance (release-2.2)
- [ ] chore(deps): lock file maintenance (release-2.3)
- [ ] chore(deps): lock file maintenance (release-2.4)
- [ ] 🔐 **Create all rate-limited PRs at once** 🔐

## PR Edited (Blocked)

The following updates have been manually edited so Renovate will no longer make changes. To discard all commits and start over, click on a checkbox below.

- [ ] [fix(deps): update module sigs.k8s.io/controller-runtime to v0.25.1 (main)](../pull/1037)

---

> [!WARNING]
> Renovate failed to look up the following dependencies: `Could not determine new digest for update (github-tags package bufbuild/buf-breaking-action)`.
>
> Files affected: `.github/workflows/ci.yml`

---

## Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

- [ ] [chore(deps): update module golang.org/x/crypto to v0.56.0 [security] (main)](../pull/1147)
- [ ] [fix(deps): update module google.golang.org/grpc to v1.83.1 [security] (main)](../pull/1142)
- [ ] [chore(deps): lock file maintenance (main)](../pull/1141)
- [ ] [chore(deps): update cachix/install-nix-action digest to 13d8dd5 (main)](../pull/1120)
- [ ] [fix(deps): update github.com/google/go-containerregistry/pkg/authn/k8schain digest to 0c8bedb (main)](../pull/1034)
- [ ] [fix(deps): update module github.com/sigstore/sigstore to v1.10.10 (main)](../pull/1102)
- [ ] [fix(deps): update module google.golang.org/protobuf to v1.36.12 (main)](../pull/1117)
- [ ] [fix(deps): update kubernetes monorepo to v0.37.0 (main)](../pull/970) (`k8s.io/api`, `k8s.io/apiextensions-apiserver`, `k8s.io/apimachinery`, `k8s.io/client-go`, `k8s.io/component-base`)
- [ ] [fix(deps): update module github.com/prometheus/client_golang to v1.24.1 (main)](../pull/1105)
- [ ] [fix(deps): update module sigs.k8s.io/controller-tools to v0.22.0 (main)](../pull/1022)
- [ ] [fix(deps): update module google.golang.org/grpc to v1.83.1 [security] (release-1.20)](../pull/1143)
- [ ] [fix(deps): update module google.golang.org/grpc to v1.83.1 [security] (release-2.2)](../pull/1144)
- [ ] [chore(deps): update module golang.org/x/crypto to v0.56.0 [security] (release-2.3)](../pull/1148)
- [ ] [fix(deps): update module google.golang.org/grpc to v1.83.1 [security] (release-2.3)](../pull/1145)
- [ ] [chore(deps): update module golang.org/x/crypto to v0.56.0 [security] (release-2.4)](../pull/1149)
- [ ] [fix(deps): update module google.golang.org/grpc to v1.83.1 [security] (release-2.4)](../pull/1146)
- [ ] **Click on this checkbox to rebase all open PRs at once**

## Detected Dependencies

Branch main

github-actions (6)

.github/workflows/backport.yml (3)

- `actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `zeebe-io/backport-action v4.6.0@2e830a1d0b8269505846ddd407a70876913ad1f8`
- `ubuntu 24.04`

.github/workflows/ci.yml (28)

- `actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `cachix/install-nix-action v31@630ae543ea3a38a9a4166f03376c02c50f408342` → [Updates: `v31`]
- `cachix/cachix-action v17@5f2d7c5294214f71b873db4b969586b980625e71` → [Updates: `v17`]
- `actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `cachix/install-nix-action v31@630ae543ea3a38a9a4166f03376c02c50f408342` → [Updates: `v31`]
- `cachix/cachix-action v17@5f2d7c5294214f71b873db4b969586b980625e71` → [Updates: `v17`]
- `actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `cachix/install-nix-action v31@630ae543ea3a38a9a4166f03376c02c50f408342` → [Updates: `v31`]
- `cachix/cachix-action v17@5f2d7c5294214f71b873db4b969586b980625e71` → [Updates: `v17`]
- `nicknovitski/nix-develop v1@9be7cfb4b10451d3390a75dc18ad0465bed4932a`
- `github/codeql-action v4@5595ccaf912efad79be6eef63a5619ff05969be3` → [Updates: `v4`]
- `github/codeql-action v4@5595ccaf912efad79be6eef63a5619ff05969be3` → [Updates: `v4`]
- `actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `cachix/install-nix-action v31@630ae543ea3a38a9a4166f03376c02c50f408342` → [Updates: `v31`]
- `cachix/cachix-action v17@5f2d7c5294214f71b873db4b969586b980625e71` → [Updates: `v17`]
- `codecov/codecov-action v7@fb8b3582c8e4def4969c97caa2f19720cb33a72f`
- `actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `bufbuild/buf-setup-action v1`
- `bufbuild/buf-lint-action v1`
- `bufbuild/buf-breaking-action v1@a074e988ee34efcd4927079e79c611f428354c01`
- `bufbuild/buf-push-action v1`
- `ubuntu 24.04`
- `ubuntu 24.04`
- `ubuntu 24.04`
- `ubuntu 24.04`
- `ubuntu 24.04`
- `ubuntu 24.04`

.github/workflows/commands.yml (10)

- `xt0rted/slash-command-action v2@bf51f8f5f4ea3d58abc7eca58f77104182b23e88`
- `actions/github-script v9@3a2844b7e9c422d3c10d287c895573f7108da1b3`
- `xt0rted/slash-command-action v2@bf51f8f5f4ea3d58abc7eca58f77104182b23e88`
- `actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `zeebe-io/backport-action v4.6.0@2e830a1d0b8269505846ddd407a70876913ad1f8`
- `xt0rted/slash-command-action v2@bf51f8f5f4ea3d58abc7eca58f77104182b23e88`
- `actions-ecosystem/action-remove-labels v1@2ce5d41b4b6aa8503e285553f75ed56e0a40bae0`
- `ubuntu 24.04`
- `ubuntu 24.04`
- `ubuntu 24.04`

.github/workflows/renovate.yml (3)

- `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `actions/create-github-app-token v3@bcd2ba49218906704ab6c1aa796996da409d3eb1`
- `renovatebot/github-action v46.2.2@e09d604f8f803bb527bd8321ed5be06c460b8682` → [Updates: `v46.3.1`]

.github/workflows/stale.yml (2)

- `actions/stale v10@1e223db275d687790206a7acac4d1a11bd6fe629` → [Updates: `v11`]
- `ubuntu 24.04`

.github/workflows/tag.yml (3)

- `actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `negz/create-tag v1@39bae1e0932567a58c20dea5a1a0d18358503320` → [Updates: `v2`]
- `ubuntu 24.04`

gomod (1)

go.mod (31)

- `go 1.25.11`
- `dario.cat/mergo v1.0.2`
- `github.com/AdaLogics/go-fuzz-headers v0.0.0-20240806141605-e8a1dd7889d6@e8a1dd7889d6`
- `github.com/Masterminds/semver/v3 v3.5.0`
- `github.com/crossplane/crossplane/apis/v2 v2.3.4` → [Updates: `v2.4.0`]
- `github.com/evanphx/json-patch v5.9.11+incompatible`
- `github.com/go-logr/logr v1.4.4`
- `github.com/google/go-cmp v0.7.0`
- `github.com/google/go-containerregistry v0.21.9` → [Updates: `v0.22.1`]
- `github.com/google/go-containerregistry/pkg/authn/k8schain v0.0.0-20260312205200-e9163014982e@e9163014982e` → [Updates: `v0.0.0-20260911193048-0c8bedb78437`]
- `github.com/in-toto/attestation v1.2.0`
- `github.com/in-toto/in-toto-golang v0.11.0`
- `github.com/prometheus/client_golang v1.23.2` → [Updates: `v1.24.1`]
- `github.com/sigstore/cosign/v3 v3.0.6` → [Updates: `v3.1.3`]
- `github.com/sigstore/sigstore v1.10.8` → [Updates: `v1.10.10`]
- `github.com/sirupsen/logrus v1.9.4` → [Updates: `v1.10.2`]
- `github.com/spf13/afero v1.15.0`
- `golang.org/x/time v0.15.0` → [Updates: `v0.16.0`]
- `google.golang.org/grpc v1.82.1` → [Updates: `v1.83.1`]
- `google.golang.org/protobuf v1.36.11` → [Updates: `v1.36.12`]
- `k8s.io/api v0.35.3` → [Updates: `v0.37.0`]
- `k8s.io/apiextensions-apiserver v0.35.0` → [Updates: `v0.37.0`]
- `k8s.io/apimachinery v0.35.3` → [Updates: `v0.37.0`]
- `k8s.io/client-go v0.35.3` → [Updates: `v0.37.0`]
- `k8s.io/component-base v0.35.0` → [Updates: `v0.37.0`]
- `k8s.io/klog/v2 v2.140.0`
- `k8s.io/utils v0.0.0-20260108192941-914a6e750570@914a6e750570` → [Updates: `v0.0.0-20260707023825-cf1189d6abe3`]
- `sigs.k8s.io/controller-runtime v0.23.1` → [Updates: `v0.25.1`]
- `sigs.k8s.io/controller-tools v0.20.0` → [Updates: `v0.22.0`]
- `sigs.k8s.io/yaml v1.6.0`
- `golang.org/x/crypto v0.55.0` → [Updates: `v0.56.0`]

nix (1)

flake.nix (3)

- `gomod2nix 1201ddd1279c35497754f016ef33d5e060f3da8d`
- `nixpkgs nixos-26.05`
- `nixpkgs-unstable nixpkgs-unstable`

renovate-config (1)

.github/renovate.json5

Branch release-1.20

dockerfile (1)

Earthfile (1)

- `curlimages/curl 8.20.0` → [Updates: `8.22.0`]

github-actions (6)

.github/workflows/backport.yml

.github/workflows/ci.yml

.github/workflows/commands.yml

.github/workflows/renovate.yml

.github/workflows/stale.yml

.github/workflows/tag.yml

gomod (1)

go.mod (1)

- `google.golang.org/grpc v1.82.1` → [Updates: `v1.83.1`]

regex (10)

.github/workflows/ci.yml

.github/workflows/ci.yml

.github/workflows/renovate.yml

.github/workflows/renovate.yml

Earthfile

Earthfile

Earthfile

Earthfile

Earthfile

Earthfile

Branch release-2.2

github-actions (6)

.github/workflows/backport.yml

.github/workflows/ci.yml

.github/workflows/commands.yml

.github/workflows/renovate.yml

.github/workflows/stale.yml

.github/workflows/tag.yml

gomod (1)

go.mod (1)

- `google.golang.org/grpc v1.82.1` → [Updates: `v1.83.1`]

nix (1)

flake.nix

renovate-config (1)

.github/renovate.json5

Branch release-2.3

github-actions (6)

.github/workflows/backport.yml

.github/workflows/ci.yml

.github/workflows/commands.yml

.github/workflows/renovate.yml

.github/workflows/stale.yml

.github/workflows/tag.yml

gomod (1)

go.mod (2)

- `google.golang.org/grpc v1.82.1` → [Updates: `v1.83.1`]
- `golang.org/x/crypto v0.55.0` → [Updates: `v0.56.0`]

nix (1)

flake.nix

renovate-config (1)

.github/renovate.json5

Branch release-2.4

github-actions (6)

.github/workflows/backport.yml

.github/workflows/ci.yml

.github/workflows/commands.yml

.github/workflows/renovate.yml

.github/workflows/stale.yml

.github/workflows/tag.yml

gomod (1)

go.mod (2)

- `google.golang.org/grpc v1.82.1` → [Updates: `v1.83.1`]
- `golang.org/x/crypto v0.55.0` → [Updates: `v0.56.0`]

nix (1)

flake.nix

renovate-config (1)

.github/renovate.json5