Dependency Dashboard

This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.
[View this repository on the Mend.io Web Portal](https://developer.mend.io/github/crossplane/function-runtime-oci).

## Config Migration Needed

- [ ] Select this checkbox to let Renovate create an automated Config Migration PR.

## Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

- [ ] Update debian:bookworm-slim Docker digest to 8820086
- [ ] Update docker/setup-buildx-action digest to 8d2750c
- [ ] Update docker/setup-qemu-action digest to c7c5346
- [ ] Update fkirc/skip-duplicate-actions action to v5.3.2
- [ ] Update module kernel.org/pub/linux/libs/security/libcap/cap to v1.2.78
- [ ] Update dependency golangci/golangci-lint to v1.64.8
- [ ] Update module github.com/alecthomas/kong to v0.9.0
- [ ] Update module github.com/bufbuild/buf to v1.73.0
- [ ] Update module github.com/crossplane/crossplane-runtime to v1.20.11
- [ ] Update module github.com/cyphar/filepath-securejoin to v0.7.0
- [ ] Update module github.com/google/go-cmp to v0.7.0
- [ ] Update module github.com/google/go-containerregistry to v0.22.1
- [ ] Update module github.com/google/uuid to v1.6.0
- [ ] Update module github.com/opencontainers/runtime-spec to v1.3.0
- [ ] Update module golang.org/x/sync to v0.23.0
- [ ] Update module google.golang.org/grpc/cmd/protoc-gen-go-grpc to v1.6.2
- [ ] Update actions/checkout action to v7
- [ ] Update actions/setup-go action to v7
- [ ] Update codecov/codecov-action action to v7
- [ ] Update dependency golangci/golangci-lint to v2
- [ ] Update dependency ubuntu to v24
- [ ] Update docker/login-action action to v4
- [ ] Update docker/setup-buildx-action action to v4
- [ ] Update docker/setup-qemu-action action to v4
- [ ] Update golangci/golangci-lint-action action to v9
- [ ] Update module github.com/alecthomas/kong to v1
- [ ] Update module github.com/crossplane/crossplane-runtime to v2
- [ ] Update negz/create-tag action to v2
- [ ] Update zeebe-io/backport-action action to v4
- [ ] 🔐 **Create all rate-limited PRs at once** 🔐

## Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

- [ ] [Update module github.com/go-chi/chi/v5 to v5.3.0 [SECURITY]](../pull/75)
- [ ] [Update module github.com/klauspost/compress to v1.18.7 [SECURITY]](../pull/85)
- [ ] [Update module github.com/rs/cors to v1.11.0 [SECURITY]](../pull/71)
- [ ] [Update module go.opentelemetry.io/otel/sdk to v1.43.0 [SECURITY]](../pull/80)
- [ ] [Update module golang.org/x/crypto to v0.56.0 [SECURITY]](../pull/72)
- [ ] [Update module golang.org/x/mod to v0.40.0 [SECURITY]](../pull/87)
- [ ] [Update module golang.org/x/oauth2 to v0.27.0 [SECURITY]](../pull/73)
- [ ] [Update module golang.org/x/sys to v0.44.0 [SECURITY]](../pull/82)
- [ ] [Update module golang.org/x/text to v0.39.0 [SECURITY]](../pull/84)
- [ ] [Update module google.golang.org/grpc to v1.83.1 [SECURITY]](../pull/86)
- [ ] [Update module google.golang.org/protobuf to v1.33.0 [SECURITY]](../pull/67)
- [ ] [Update module github.com/docker/cli to v29 [SECURITY]](../pull/88)
- [ ] [Update actions/checkout digest to 11d5960](../pull/70)
- [ ] [Update actions/setup-go digest to 7b8cf10](../pull/76)
- [ ] [Update codecov/codecov-action digest to ab904c4](../pull/77)
- [ ] [Update docker/login-action digest to c94ce9f](../pull/83)
- [ ] [Update dependency golang to v1.27.1](../pull/47)
- [ ] **Click on this checkbox to rebase all open PRs at once**

## Detected Dependencies

dockerfile (1)

cluster/images/function-runtime-oci/Dockerfile (1)

- `debian bookworm-slim@sha256:24c92a69df28b21676d721fe18c0bf64138bfc69b486746ad935b49cc31b0b91` → [Updates: `bookworm-slim`]

github-actions (3)

.github/workflows/backport.yml (3)

- `actions/checkout v4@8ade135a41bc03ea155e62e844d188df1ea18608` → [Updates: `v7`, `v4`]
- `zeebe-io/backport-action v1.4.0@bd68141f079bd036e45ea8149bc9d174d5a04703` → [Updates: `v4.6.0`]
- `ubuntu 22.04` → [Updates: `24.04`]

.github/workflows/ci.yml (22)

- `fkirc/skip-duplicate-actions v5.3.0@12aca0a884f6137d619d6a8a09fcc3406ced5281` → [Updates: `v5.3.2`]
- `actions/checkout v4@8ade135a41bc03ea155e62e844d188df1ea18608` → [Updates: `v7`, `v4`]
- `actions/setup-go v4@93397bea11091df50f3d7e59dc26a7711a8bcfbe` → [Updates: `v7`, `v4`]
- `golangci/golangci-lint-action v3@3a919529898de77ec3da873e3063ca4b10e7f5cc` → [Updates: `v9`]
- `actions/checkout v4@8ade135a41bc03ea155e62e844d188df1ea18608` → [Updates: `v7`, `v4`]
- `actions/setup-go v4@93397bea11091df50f3d7e59dc26a7711a8bcfbe` → [Updates: `v7`, `v4`]
- `actions/checkout v4@8ade135a41bc03ea155e62e844d188df1ea18608` → [Updates: `v7`, `v4`]
- `actions/setup-go v4@93397bea11091df50f3d7e59dc26a7711a8bcfbe` → [Updates: `v7`, `v4`]
- `actions/checkout v4@8ade135a41bc03ea155e62e844d188df1ea18608` → [Updates: `v7`, `v4`]
- `actions/setup-go v4@93397bea11091df50f3d7e59dc26a7711a8bcfbe` → [Updates: `v7`, `v4`]
- `codecov/codecov-action v3@eaaf4bedf32dbdc6b720b63067d99c4d77d6047d` → [Updates: `v7`, `v3`]
- `docker/setup-qemu-action v3@68827325e0b33c7199eb31dd4e31fbe9023e06e3` → [Updates: `v4`, `v3`]
- `docker/setup-buildx-action v3@f95db51fddba0c2d1ec667646a06c2ce06100226` → [Updates: `v4`, `v3`]
- `actions/checkout v4@8ade135a41bc03ea155e62e844d188df1ea18608` → [Updates: `v7`, `v4`]
- `actions/setup-go v4@93397bea11091df50f3d7e59dc26a7711a8bcfbe` → [Updates: `v7`, `v4`]
- `docker/login-action v3@343f7c4344506bcbf9b4de18042ae17996df046d` → [Updates: `v4`, `v3`]
- `ubuntu 22.04` → [Updates: `24.04`]
- `ubuntu 22.04` → [Updates: `24.04`]
- `ubuntu 22.04` → [Updates: `24.04`]
- `ubuntu 22.04` → [Updates: `24.04`]
- `ubuntu 22.04` → [Updates: `24.04`]
- `ubuntu 22.04` → [Updates: `24.04`]

.github/workflows/tag.yml (3)

- `actions/checkout v4@8ade135a41bc03ea155e62e844d188df1ea18608` → [Updates: `v7`, `v4`]
- `negz/create-tag v1@39bae1e0932567a58c20dea5a1a0d18358503320` → [Updates: `v2`]
- `ubuntu 22.04` → [Updates: `24.04`]

gomod (1)

go.mod (26)

- `go 1.20`
- `github.com/Masterminds/semver v1.5.0`
- `github.com/alecthomas/kong v0.8.0` → [Updates: `v0.9.0`, `v1.16.1`]
- `github.com/bufbuild/buf v1.26.1` → [Updates: `v1.73.0`]
- `github.com/crossplane/crossplane-runtime v1.13.0` → [Updates: `v1.20.11`, `v2.4.0`]
- `github.com/cyphar/filepath-securejoin v0.2.4` → [Updates: `v0.7.0`]
- `github.com/google/go-cmp v0.5.9` → [Updates: `v0.7.0`]
- `github.com/google/go-containerregistry v0.16.1` → [Updates: `v0.22.1`]
- `github.com/google/uuid v1.3.1` → [Updates: `v1.6.0`]
- `github.com/opencontainers/runtime-spec v1.1.0` → [Updates: `v1.3.0`]
- `golang.org/x/sync v0.3.0` → [Updates: `v0.23.0`]
- `golang.org/x/sys v0.12.0` → [Updates: `v0.44.0`]
- `google.golang.org/grpc v1.58.3` → [Updates: `v1.83.1`]
- `google.golang.org/grpc/cmd/protoc-gen-go-grpc v1.3.0` → [Updates: `v1.6.2`]
- `google.golang.org/protobuf v1.31.0` → [Updates: `v1.33.0`]
- `kernel.org/pub/linux/libs/security/libcap/cap v1.2.69` → [Updates: `v1.2.78`]
- `github.com/docker/cli v24.0.5+incompatible` → [Updates: `v29.2.0+incompatible`]
- `github.com/docker/docker v24.0.5+incompatible`
- `github.com/go-chi/chi/v5 v5.0.10` → [Updates: `v5.3.0`]
- `github.com/klauspost/compress v1.16.7` → [Updates: `v1.18.7`]
- `github.com/rs/cors v1.9.0` → [Updates: `v1.11.0`]
- `go.opentelemetry.io/otel/sdk v1.16.0` → [Updates: `v1.43.0`]
- `golang.org/x/crypto v0.12.0` → [Updates: `v0.56.0`]
- `golang.org/x/mod v0.12.0` → [Updates: `v0.40.0`]
- `golang.org/x/oauth2 v0.11.0` → [Updates: `v0.27.0`]
- `golang.org/x/text v0.12.0` → [Updates: `v0.39.0`]

regex (3)

.github/workflows/ci.yml (1)

- `golang 1.21.2` → [Updates: `1.27.1`]

.github/workflows/ci.yml (1)

- `golangci/golangci-lint 1.54.2` → [Updates: `1.64.8`, `2.13.2`]

Makefile (1)

- `golangci/golangci-lint 1.54.2` → [Updates: `1.64.8`, `2.13.2`]

---

- [ ] Check this box to trigger a request for Renovate to run again on this repository