Dependency Dashboard

This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.

## Abandoned Dependencies

The following dependencies have not received updates for an extended period and may be unmaintained.

View abandoned dependencies (53)

> [!NOTE]
Packages are marked as abandoned when they exceed the [`abandonmentThreshold`](https://docs.renovatebot.com/configuration-options/#abandonmentthreshold) since their last release. Unlike deprecated packages with official notices, abandonment is detected by release inactivity.
>
| Datasource | Package | Last Updated |
|------------|------|-------------|
| gomod | [github.com/agext/levenshtein](https://redirect.github.com/agext/levenshtein) | `2020-03-12` |
| gomod | [github.com/beorn7/perks](https://redirect.github.com/beorn7/perks) | `2019-07-31` |
| gomod | [github.com/blang/semver/v4](https://redirect.github.com/blang/semver) | `2020-05-24` |
| gomod | [github.com/cespare/xxhash/v2](https://redirect.github.com/cespare/xxhash) | `2024-04-04` |
| gomod | [github.com/cheekybits/genny](https://redirect.github.com/cheekybits/genny) | `2018-08-30` |
| gomod | [github.com/davecgh/go-spew](https://redirect.github.com/davecgh/go-spew) | `2018-02-21` |
| gomod | [github.com/fatih/camelcase](https://redirect.github.com/fatih/camelcase) | `2018-08-07` |
| gomod | [github.com/go-logr/stdr](https://redirect.github.com/go-logr/stdr) | `2021-12-15` |
| gomod | [github.com/go-logr/zapr](https://redirect.github.com/go-logr/zapr) | `2023-11-03` |
| gomod | [github.com/gogo/protobuf](https://redirect.github.com/gogo/protobuf) | `2021-01-10` |
| gomod | [github.com/golang/protobuf](https://redirect.github.com/golang/protobuf) | `2024-03-06` |
| gomod | [github.com/google/uuid](https://redirect.github.com/google/uuid) | `2024-01-23` |
| gomod | [github.com/gorilla/mux](https://redirect.github.com/gorilla/mux) | `2023-11-05` |
| gomod | [github.com/grafana/river](https://redirect.github.com/grafana/river) | `2023-10-26` |
| gomod | [github.com/hashicorp/errwrap](https://redirect.github.com/hashicorp/errwrap) | `2020-07-14` |
| gomod | [github.com/hashicorp/go-cleanhttp](https://redirect.github.com/hashicorp/go-cleanhttp) | `2021-02-03` |
| gomod | [github.com/hashicorp/go-hclog](https://redirect.github.com/hashicorp/go-hclog) | `2024-04-01` |
| gomod | [github.com/hashicorp/go-multierror](https://redirect.github.com/hashicorp/go-multierror) | `2021-03-11` |
| gomod | [github.com/hashicorp/go-uuid](https://redirect.github.com/hashicorp/go-uuid) | `2022-04-08` |
| gomod | [github.com/hashicorp/logutils](https://redirect.github.com/hashicorp/logutils) | `2018-08-28` |
| gomod | [github.com/hashicorp/terraform-plugin-framework-jsontypes](https://redirect.github.com/hashicorp/terraform-plugin-framework-jsontypes) | `2024-09-09` |
| gomod | [github.com/iancoleman/strcase](https://redirect.github.com/iancoleman/strcase) | `2023-07-13` |
| gomod | [github.com/inconshreveable/mousetrap](https://redirect.github.com/inconshreveable/mousetrap) | `2022-11-27` |
| gomod | [github.com/josharian/intern](https://redirect.github.com/josharian/intern) | `2019-12-14` |
| gomod | [github.com/json-iterator/go](https://redirect.github.com/json-iterator/go) | `2021-09-11` |
| gomod | [github.com/jszwedko/go-datemath](https://redirect.github.com/jszwedko/go-datemath) | `2019-10-14` |
| gomod | [github.com/mattetti/filebuffer](https://redirect.github.com/mattetti/filebuffer) | `2020-05-07` |
| gomod | [github.com/mitchellh/copystructure](https://redirect.github.com/mitchellh/copystructure) | `2021-05-05` |
| gomod | [github.com/mitchellh/go-wordwrap](https://redirect.github.com/mitchellh/go-wordwrap) | `2020-09-25` |
| gomod | [github.com/mitchellh/mapstructure](https://redirect.github.com/mitchellh/mapstructure) | `2022-04-20` |
| gomod | [github.com/mitchellh/reflectwalk](https://redirect.github.com/mitchellh/reflectwalk) | `2021-05-03` |
| gomod | [github.com/modern-go/concurrent](https://redirect.github.com/modern-go/concurrent) | `2018-03-06` |
| gomod | [github.com/modern-go/reflect2](https://redirect.github.com/modern-go/reflect2) | `2021-09-11` |
| gomod | [github.com/mohae/deepcopy](https://redirect.github.com/mohae/deepcopy) | `2017-09-29` |
| gomod | [github.com/munnerz/goautoneg](https://redirect.github.com/munnerz/goautoneg) | `2019-10-10` |
| gomod | [github.com/perimeterx/marshmallow](https://redirect.github.com/perimeterx/marshmallow) | `2023-07-03` |
| gomod | [github.com/pkg/errors](https://redirect.github.com/pkg/errors) | `2020-01-14` |
| gomod | [github.com/pmezard/go-difflib](https://redirect.github.com/pmezard/go-difflib) | `2016-01-10` |
| gomod | [github.com/rivo/uniseg](https://redirect.github.com/rivo/uniseg) | `2024-02-08` |
| gomod | [github.com/russross/blackfriday/v2](https://redirect.github.com/russross/blackfriday) | `2020-11-07` |
| gomod | [github.com/unknwon/bra](https://redirect.github.com/unknwon/bra) | `2020-05-17` |
| gomod | [github.com/unknwon/com](https://redirect.github.com/unknwon/com) | `2019-08-04` |
| gomod | [github.com/unknwon/log](https://redirect.github.com/unknwon/log) | `2020-03-08` |
| gomod | [github.com/vmihailenco/msgpack/v5](https://redirect.github.com/vmihailenco/msgpack) | `2023-10-26` |
| gomod | [github.com/vmihailenco/tagparser/v2](https://redirect.github.com/vmihailenco/tagparser) | `2021-02-03` |
| gomod | [github.com/x448/float16](https://redirect.github.com/x448/float16) | `2020-01-17` |
| gomod | [go.uber.org/multierr](https://redirect.github.com/uber-go/multierr) | `2023-03-29` |
| gomod | [golang.org/x/xerrors](https://go.googlesource.com/xerrors) | `2024-09-03` |
| gomod | [gopkg.in/fsnotify/fsnotify.v1](https://redirect.github.com/fsnotify/fsnotify) | `2018-01-10` |
| gomod | [gopkg.in/inf.v0](https://redirect.github.com/go-inf/inf) | `2018-03-26` |
| gomod | [gopkg.in/validator.v2](https://redirect.github.com/go-validator/validator) | `2022-04-05` |
| gomod | [gopkg.in/yaml.v2](https://redirect.github.com/go-yaml/yaml) | `2022-05-27` |
| gomod | [gopkg.in/yaml.v3](https://redirect.github.com/go-yaml/yaml) | `2022-05-27` |

## Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

- [ ] chore(deps): update github.com/chromedp/cdproto digest to 686a5c7
- [ ] chore(deps): update github.com/go-json-experiment/json digest to c27c302
- [ ] chore(deps): update golang.org/x/exp digest to 85c1c22
- [ ] chore(deps): update golang.org/x/telemetry digest to 15ceca2
- [ ] chore(deps): update google.golang.org/genproto/googleapis/api digest to f61a6ca
- [ ] chore(deps): update google.golang.org/genproto/googleapis/rpc digest to f61a6ca
- [ ] chore(deps): update k8s.io/kube-openapi digest to 7970a1e
- [ ] chore(deps): update k8s.io/utils digest to cf1189d
- [ ] chore(deps): update sigs.k8s.io/json digest to 11ed52e
- [ ] chore(deps): update grafana monorepo to v0.0.85-test (`github.com/grafana/grafana/apps/alerting/alertenrichment`, `github.com/grafana/grafana/apps/alerting/rules`, `github.com/grafana/grafana/apps/dashboard`, `github.com/grafana/grafana/apps/playlist`, `github.com/grafana/grafana/pkg/apimachinery`)
- [ ] chore(deps): update module github.com/antchfx/htmlquery to v1.3.6
- [ ] chore(deps): update module github.com/antchfx/xpath to v1.3.8
- [ ] chore(deps): update module github.com/cockroachdb/apd/v3 to v3.2.3
- [ ] chore(deps): update module github.com/fxamacker/cbor/v2 to v2.9.3
- [ ] chore(deps): update module github.com/go-logr/logr to v1.4.4
- [ ] chore(deps): update module github.com/goccy/go-json to v0.10.6
- [ ] chore(deps): update module github.com/grafana/pyroscope-go/godeltaprof to v0.1.12
- [ ] chore(deps): update module github.com/grpc-ecosystem/go-grpc-middleware/v2 to v2.3.4
- [ ] chore(deps): update module github.com/hashicorp/go-retryablehttp to v0.7.8
- [ ] chore(deps): update module github.com/knadh/koanf/maps to v0.1.3
- [ ] chore(deps): update module github.com/knadh/koanf/v2 to v2.3.6
- [ ] chore(deps): update module github.com/mailru/easyjson to v0.9.2
- [ ] chore(deps): update module github.com/mattn/go-colorable to v0.1.15
- [ ] chore(deps): update module github.com/mattn/go-isatty to v0.0.24
- [ ] chore(deps): update module github.com/mattn/go-runewidth to v0.0.30
- [ ] chore(deps): update module github.com/oasdiff/yaml3 to v0.0.14
- [ ] chore(deps): update module github.com/pierrec/lz4/v4 to v4.1.29
- [ ] chore(deps): update module github.com/prometheus/client_model to v0.6.3
- [ ] chore(deps): update module github.com/stretchr/objx to v0.5.3
- [ ] chore(deps): update module github.com/tmccombs/hcl2json to v0.6.9
- [ ] chore(deps): update module github.com/urfave/cli to v1.22.17
- [ ] chore(deps): update module go.mongodb.org/mongo-driver to v1.17.10
- [ ] chore(deps): update module go.yaml.in/yaml/v2 to v2.4.4
- [ ] chore(deps): update module go.yaml.in/yaml/v3 to v3.0.5
- [ ] chore(deps): update module k8s.io/gengo/v2 to v2.0.0-20260408192533-25e2208e0dc3
- [ ] fix(deps): update module google.golang.org/protobuf to v1.36.12
- [ ] chore(deps): update actions/checkout action to v6.1.0
- [ ] chore(deps): update actions/setup-go action to v6.5.0
- [ ] chore(deps): update docker/build-push-action action to v7.3.0
- [ ] chore(deps): update docker/login-action action to v4.6.0
- [ ] chore(deps): update golang docker tag to v1.27.1
- [ ] chore(deps): update golangci/golangci-lint-action action to v9.3.0
- [ ] chore(deps): update module connectrpc.com/connect to v1.21.0
- [ ] chore(deps): update module cuelang.org/go to v0.17.1
- [ ] chore(deps): update module github.com/apache/arrow-go/v18 to v18.8.0
- [ ] chore(deps): update module github.com/burntsushi/toml to v1.6.0
- [ ] chore(deps): update module github.com/crossplane/upjet/v2 to v2.4.2
- [ ] chore(deps): update module github.com/elazarl/goproxy to v1.9.1
- [ ] chore(deps): update module github.com/evanw/esbuild to v0.28.2
- [ ] chore(deps): update module github.com/fatih/color to v1.19.0
- [ ] chore(deps): update module github.com/fsnotify/fsnotify to v1.10.1
- [ ] chore(deps): update module github.com/go-viper/mapstructure/v2 to v2.5.0
- [ ] chore(deps): update module github.com/google/flatbuffers to v25.12.19+incompatible
- [ ] chore(deps): update module github.com/google/go-querystring to v1.2.0
- [ ] chore(deps): update module github.com/grafana/fleet-management-api to v1.3.0
- [ ] chore(deps): update module github.com/grafana/grafana-app-sdk/logging to v0.59.0
- [ ] chore(deps): update module github.com/grafana/grafana-plugin-sdk-go to v0.296.4
- [ ] chore(deps): update module github.com/grafana/otel-profiling-go to v0.6.0
- [ ] chore(deps): update module github.com/grpc-ecosystem/grpc-gateway/v2 to v2.30.0
- [ ] chore(deps): update module github.com/hashicorp/go-plugin to v1.8.0
- [ ] chore(deps): update module github.com/hashicorp/go-version to v1.9.0
- [ ] chore(deps): update module github.com/hashicorp/terraform-json to v0.28.0
- [ ] chore(deps): update module github.com/hashicorp/terraform-plugin-framework-validators to v0.19.0
- [ ] chore(deps): update module github.com/hashicorp/terraform-plugin-go to v0.31.0
- [ ] chore(deps): update module github.com/hashicorp/terraform-plugin-log to v0.11.0
- [ ] chore(deps): update module github.com/hashicorp/terraform-plugin-mux to v0.23.1
- [ ] chore(deps): update module github.com/hashicorp/terraform-plugin-sdk/v2 to v2.40.1
- [ ] chore(deps): update module github.com/hashicorp/terraform-registry-address to v0.5.0
- [ ] chore(deps): update module github.com/hashicorp/terraform-svchost to v0.2.1
- [ ] chore(deps): update module github.com/klauspost/cpuid/v2 to v2.4.0
- [ ] chore(deps): update module github.com/magefile/mage to v1.17.2
- [ ] chore(deps): update module github.com/oasdiff/yaml to v0.1.1
- [ ] chore(deps): update module github.com/oklog/run to v1.2.0
- [ ] chore(deps): update module github.com/pelletier/go-toml/v2 to v2.4.3
- [ ] chore(deps): update module github.com/prometheus/alertmanager to v0.34.0
- [ ] chore(deps): update module github.com/prometheus/client_golang to v1.24.1
- [ ] chore(deps): update module github.com/prometheus/common to v0.71.0
- [ ] chore(deps): update module github.com/prometheus/procfs to v0.22.0
- [ ] chore(deps): update module github.com/rs/zerolog to v1.35.1
- [ ] chore(deps): update module github.com/stretchr/testify to v1.12.1
- [ ] chore(deps): update module github.com/woodsbury/decimal128 to v1.5.0
- [ ] chore(deps): update module github.com/zclconf/go-cty to v1.19.0
- [ ] chore(deps): update module github.com/zeebo/xxh3 to v1.1.0
- [ ] chore(deps): update module go.opentelemetry.io/proto/otlp to v1.11.0
- [ ] chore(deps): update module go.uber.org/zap to v1.28.0
- [ ] chore(deps): update module golang.org/x/net to v0.59.0
- [ ] chore(deps): update module golang.org/x/oauth2 to v0.37.0
- [ ] chore(deps): update module golang.org/x/sync to v0.23.0
- [ ] chore(deps): update module golang.org/x/sys to v0.48.0
- [ ] chore(deps): update module golang.org/x/term to v0.46.0
- [ ] chore(deps): update module golang.org/x/text to v0.42.0
- [ ] chore(deps): update module golang.org/x/time to v0.16.0
- [ ] chore(deps): update module golang.org/x/tools to v0.50.0
- [ ] chore(deps): update module k8s.io/klog/v2 to v2.140.0
- [ ] chore(deps): update module sigs.k8s.io/controller-runtime to v0.25.0
- [ ] chore(deps): update module sigs.k8s.io/structured-merge-diff/v6 to v6.4.2
- [ ] chore(deps): update opentelemetry-go monorepo to v1.46.0 (`go.opentelemetry.io/otel/exporters/otlp/otlptrace`, `go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc`, `go.opentelemetry.io/otel/metric`, `go.opentelemetry.io/otel/sdk`, `go.opentelemetry.io/otel/trace`)
- [ ] chore(deps): update opentelemetry-go-contrib monorepo (`go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc`, `go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace`, `go.opentelemetry.io/contrib/propagators/jaeger`, `go.opentelemetry.io/contrib/samplers/jaegerremote`)
- [ ] fix(deps): update module github.com/alecthomas/kong to v1.16.1
- [ ] chore(deps): update actions/checkout action to v7
- [ ] chore(deps): update actions/setup-go action to v7
- [ ] chore(deps): update github artifact actions (major) (`actions/download-artifact`, `actions/upload-artifact`)
- [ ] chore(deps): update go-openapi packages to v1 (`github.com/go-openapi/analysis`, `github.com/go-openapi/jsonpointer`, `github.com/go-openapi/jsonreference`, `github.com/go-openapi/spec`, `github.com/go-openapi/validate`)
- [ ] chore(deps): update grafana monorepo to v13 (`github.com/grafana/grafana/apps/alerting/alertenrichment`, `github.com/grafana/grafana/apps/alerting/rules`, `github.com/grafana/grafana/apps/dashboard`, `github.com/grafana/grafana/apps/playlist`, `github.com/grafana/grafana/pkg/apimachinery`)
- [ ] chore(deps): update grafana/shared-workflows/trigger-argo-workflow action to v2.0
- [ ] chore(deps): update module github.com/apparentlymart/go-textseg/v15 to v17
- [ ] chore(deps): update module github.com/cenkalti/backoff/v5 to v7
- [ ] chore(deps): update module github.com/oklog/ulid to v2
- [ ] chore(deps): update module github.com/olekukonko/tablewriter to v1
- [ ] chore(deps): update module github.com/urfave/cli to v3
- [ ] chore(deps): update module go.mongodb.org/mongo-driver to v2
- [ ] chore(deps): update module go.yaml.in/yaml/v2 to v3
- [ ] chore(deps): update module gomodules.xyz/jsonpatch/v2 to v3
- [ ] chore(deps): update module google.golang.org/appengine to v2
- [ ] chore(deps): update module gopkg.in/evanphx/json-patch.v4 to v5
- [ ] chore(deps): update module gopkg.in/yaml.v2 to v3
- [ ] chore(deps): update module sigs.k8s.io/structured-merge-diff/v6 to v7
- [ ] 🔐 **Create all rate-limited PRs at once** 🔐

## Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

- [ ] [chore(deps): update gcr.io/distroless/static-debian12:nonroot docker digest to afa5c87](../pull/124)
- [ ] chore(deps): update github.com/grafana/authlib/claims digest to 0d62418
- [ ] chore(deps): update github.com/jszwedko/go-datemath digest to 7f666ee
- [ ] chore(deps): update module github.com/hashicorp/hcl/v2 to v2.25.0

## Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

- [ ] [fix(security/unknown/): update module github.com/klauspost/compress to v1.18.7 [security]](../pull/130)
- [ ] [fix(security/unknown/): update module github.com/yuin/goldmark to v1.7.17 [security]](../pull/123)
- [ ] [fix(security/unknown/): update module github.com/getkin/kin-openapi to v0.144.0 [security]](../pull/128)
- [ ] [fix(security/unknown/): update module go.opentelemetry.io/otel to v1.44.0 [security]](../pull/129)
- [ ] [fix(security/unknown/): update module golang.org/x/mod to v0.40.0 [security]](../pull/131)
- [ ] [fix(security/unknown/): update module google.golang.org/grpc to v1.83.1 [security]](../pull/127)
- [ ] [chore(deps): update docker/dockerfile:1 docker digest to ecfaec9](../pull/132)
- [ ] [fix(deps): update go-openapi packages](../pull/116) (`github.com/go-openapi/analysis`, `github.com/go-openapi/errors`, `github.com/go-openapi/jsonpointer`, `github.com/go-openapi/jsonreference`, `github.com/go-openapi/loads`, `github.com/go-openapi/runtime`, `github.com/go-openapi/spec`, `github.com/go-openapi/strfmt`, `github.com/go-openapi/swag`, `github.com/go-openapi/swag/cmdutils`, `github.com/go-openapi/swag/conv`, `github.com/go-openapi/swag/fileutils`, `github.com/go-openapi/swag/jsonname`, `github.com/go-openapi/swag/jsonutils`, `github.com/go-openapi/swag/loading`, `github.com/go-openapi/swag/mangling`, `github.com/go-openapi/swag/netutils`, `github.com/go-openapi/swag/stringutils`, `github.com/go-openapi/swag/typeutils`, `github.com/go-openapi/swag/yamlutils`, `github.com/go-openapi/validate`)
- [ ] [fix(deps): update kubernetes monorepo to v0.37.0](../pull/113) (`k8s.io/api`, `k8s.io/apiextensions-apiserver`, `k8s.io/apimachinery`, `k8s.io/client-go`, `k8s.io/code-generator`, `k8s.io/component-base`)
- [ ] [fix(deps): update module github.com/crossplane/crossplane-runtime/v2 to v2.4.0](../pull/115)
- [ ] [fix(deps): update module github.com/crossplane/function-sdk-go to v0.7.1](../pull/103)
- [ ] [fix(deps): update module github.com/grafana/crossplane-provider-grafana/v2 to v2.14.0](../pull/117)
- [ ] [fix(deps): update module sigs.k8s.io/controller-tools to v0.22.0](../pull/118)
- [ ] [chore(deps): update docker/setup-buildx-action action to v4](../pull/119)
- [ ] [chore(deps): update docker/setup-qemu-action action to v4](../pull/120)
- [ ] **Click on this checkbox to rebase all open PRs at once**

## Vulnerabilities

> [!IMPORTANT]
> `21`/`21` CVEs have Renovate fixes.

gomod

go.mod

github.com/getkin/kin-openapi

- [GHSA-jpcw-4wr7-c3vq](https://osv.dev/vulnerability/GHSA-jpcw-4wr7-c3vq) (fixed in >= 0.144.0)
- [GHSA-mmfr-pmjx-hw9w](https://osv.dev/vulnerability/GHSA-mmfr-pmjx-hw9w) (fixed in >= 0.141.0)
- [GHSA-r277-6w6q-xmqw](https://osv.dev/vulnerability/GHSA-r277-6w6q-xmqw) (fixed in >= 0.144.0)
- [GHSA-xhj3-7xw9-vr34](https://osv.dev/vulnerability/GHSA-xhj3-7xw9-vr34) (fixed in >= 0.142.0)
- [GO-2026-6095](https://osv.dev/vulnerability/GO-2026-6095) (fixed in >= 0.144.0)
- [GO-2026-6112](https://osv.dev/vulnerability/GO-2026-6112) (fixed in >= 0.144.0)
- [GO-2026-6274](https://osv.dev/vulnerability/GO-2026-6274) (fixed in >= 0.141.0)
- [GO-2026-6275](https://osv.dev/vulnerability/GO-2026-6275) (fixed in >= 0.142.0)

github.com/klauspost/compress

- [GO-2026-5841](https://osv.dev/vulnerability/GO-2026-5841) (fixed in >= 1.18.7)

github.com/yuin/goldmark

- [GO-2026-5320](https://osv.dev/vulnerability/GO-2026-5320) (fixed in >= 1.7.17)

go.opentelemetry.io/otel

- [GO-2026-5158](https://osv.dev/vulnerability/GO-2026-5158) (fixed in >= 1.44.0)

golang.org/x/mod

- [GO-2026-6179](https://osv.dev/vulnerability/GO-2026-6179) (fixed in >= 0.40.0)
- [GO-2026-6180](https://osv.dev/vulnerability/GO-2026-6180) (fixed in >= 0.40.0)

google.golang.org/grpc

- [GHSA-2v4p-qf9q-27wj](https://osv.dev/vulnerability/GHSA-2v4p-qf9q-27wj) (fixed in >= 1.82.2)
- [GHSA-hrxh-6v49-42gf](https://osv.dev/vulnerability/GHSA-hrxh-6v49-42gf) (fixed in >= 1.82.1)
- [GHSA-qc2q-p7wx-3px3](https://osv.dev/vulnerability/GHSA-qc2q-p7wx-3px3) (fixed in >= 1.83.1)
- [GHSA-vp52-pcj8-j9qc](https://osv.dev/vulnerability/GHSA-vp52-pcj8-j9qc) (fixed in >= 1.83.1)
- [GO-2026-6061](https://osv.dev/vulnerability/GO-2026-6061) (fixed in >= 1.82.1)
- [GO-2026-6348](https://osv.dev/vulnerability/GO-2026-6348) (fixed in >= 1.83.1)
- [GO-2026-6441](https://osv.dev/vulnerability/GO-2026-6441) (fixed in >= 1.83.1)
- [GO-2026-6443](https://osv.dev/vulnerability/GO-2026-6443) (fixed in >= 1.82.2)

## Detected Dependencies

dockerfile (1)

Dockerfile (3)

- `docker/dockerfile 1@sha256:87999aa3d42bdc6bea60565083ee17e86d1f3339802f543c0d03998580f9cb89` → [Updates: `1`]
- `golang 1.26.3@sha256:2d6c80227255c3112a4d08e67ba98e58efd3846daf15d9d7d4c389565d881b1a` → [Updates: `1.27.1`]
- `gcr.io/distroless/static-debian12 nonroot@sha256:b7bb25d9f7c31d2bdd1982feb4dafcaf137703c7075dbe2febb41c24212b946f` → [Updates: `nonroot`]

github-actions (1)

.github/workflows/ci.yml (20)

- `actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd` → [Updates: `v6.1.0`, `v7.0.1`]
- `actions/setup-go v6.4.0@4a3601121dd01d1626a1e23e37211e3254c1c06c` → [Updates: `v6.5.0`, `v7.0.0`]
- `golangci/golangci-lint-action v9.2.1@82606bf257cbaff209d206a39f5134f0cfbfd2ee` → [Updates: `v9.3.0`]
- `actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd` → [Updates: `v6.1.0`, `v7.0.1`]
- `actions/setup-go v6.4.0@4a3601121dd01d1626a1e23e37211e3254c1c06c` → [Updates: `v6.5.0`, `v7.0.0`]
- `docker/setup-qemu-action v3.7.0@c7c53464625b32c7a7e944ae62b3e17d2b600130` → [Updates: `v4.3.0`]
- `docker/setup-buildx-action v3.12.0@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f` → [Updates: `v4.3.0`]
- `actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd` → [Updates: `v6.1.0`, `v7.0.1`]
- `docker/build-push-action v7.2.0@f9f3042f7e2789586610d6e8b85c8f03e5195baf` → [Updates: `v7.3.0`]
- `actions/upload-artifact v6.0.0@b7c566a772e6b6bfb58ed0dc250532a479d7789f` → [Updates: `v7.0.1`]
- `actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd` → [Updates: `v6.1.0`, `v7.0.1`]
- `actions/download-artifact v7.0.0@37930b1c2abaa49bbe596cd826c3c89aef350131` → [Updates: `v8.0.1`]
- `docker/login-action v4.2.0@650006c6eb7dba73a995cc03b0b2d7f5ca915bee` → [Updates: `v4.6.0`]
- `grafana/shared-workflows trigger-argo-workflow/v1.3.0@8269e9362f30c5458c2cad54510ea74fd053920c` → [Updates: `trigger-argo-workflow/v2.0`]
- `ubuntu 24.04`
- `golangci/golangci-lint ${{ env.GOLANGCI_VERSION }}`
- `ubuntu 24.04`
- `ubuntu 24.04`
- `buildx ${{ env.DOCKER_BUILDX_VERSION }}`
- `ubuntu 24.04`

gomod (1)

go.mod (224)

- `go 1.26.3`
- `github.com/alecthomas/kong v1.15.0` → [Updates: `v1.16.1`]
- `github.com/crossplane/crossplane-runtime/v2 v2.2.0` → [Updates: `v2.4.0`]
- `github.com/crossplane/function-sdk-go v0.5.0` → [Updates: `v0.7.1`]
- `github.com/go-openapi/runtime v0.29.2` → [Updates: `v0.33.2`]
- `github.com/google/go-cmp v0.7.0`
- `github.com/grafana/crossplane-provider-grafana/v2 v2.6.0` → [Updates: `v2.14.0`]
- `google.golang.org/protobuf v1.36.11` → [Updates: `v1.36.12`]
- `k8s.io/api v0.35.2` → [Updates: `v0.37.0`]
- `k8s.io/apimachinery v0.35.2` → [Updates: `v0.37.0`]
- `sigs.k8s.io/controller-tools v0.20.1` → [Updates: `v0.22.0`]
- `connectrpc.com/connect v1.19.1` → [Updates: `v1.21.0`]
- `cuelang.org/go v0.11.1` → [Updates: `v0.17.1`]
- `dario.cat/mergo v1.0.2`
- `github.com/BurntSushi/toml v1.5.0` → [Updates: `v1.6.0`]
- `github.com/agext/levenshtein v1.2.3`
- `github.com/antchfx/htmlquery v1.3.2` → [Updates: `v1.3.6`]
- `github.com/antchfx/xpath v1.3.6` → [Updates: `v1.3.8`]
- `github.com/apache/arrow-go/v18 v18.2.0` → [Updates: `v18.8.0`]
- `github.com/apparentlymart/go-textseg/v15 v15.0.0` → [Updates: `v17.0.1`]
- `github.com/beorn7/perks v1.0.1`
- `github.com/blang/semver/v4 v4.0.0`
- `github.com/cenkalti/backoff/v5 v5.0.3` → [Updates: `v7.0.0`]
- `github.com/cespare/xxhash/v2 v2.3.0`
- `github.com/cheekybits/genny v1.0.0`
- `github.com/chromedp/cdproto v0.0.0-20240810084448-b931b754e476@b931b754e476` → [Updates: `v0.0.0-20260912003405-686a5c723acc`]
- `github.com/cockroachdb/apd/v3 v3.2.1` → [Updates: `v3.2.3`]
- `github.com/cpuguy83/go-md2man/v2 v2.0.7`
- `github.com/crossplane/upjet/v2 v2.2.0` → [Updates: `v2.4.2`]
- `github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc@d8f796af33cc`
- `github.com/elazarl/goproxy v1.7.2` → [Updates: `v1.9.1`]
- `github.com/emicklei/go-restful/v3 v3.13.0`
- `github.com/evanphx/json-patch v5.9.11+incompatible`
- `github.com/evanphx/json-patch/v5 v5.9.11`
- `github.com/evanw/esbuild v0.25.10` → [Updates: `v0.28.2`]
- `github.com/fatih/camelcase v1.0.0`
- `github.com/fatih/color v1.18.0` → [Updates: `v1.19.0`]
- `github.com/fsnotify/fsnotify v1.9.0` → [Updates: `v1.10.1`]
- `github.com/fxamacker/cbor/v2 v2.9.0` → [Updates: `v2.9.3`]
- `github.com/getkin/kin-openapi v0.133.0` → [Updates: `v0.144.0`]
- `github.com/go-json-experiment/json v0.0.0-20240815175050-ebd3a8989ca1@ebd3a8989ca1` → [Updates: `v0.0.0-20260820222146-c27c302e5fc3`]
- `github.com/go-logr/logr v1.4.3` → [Updates: `v1.4.4`]
- `github.com/go-logr/stdr v1.2.2`
- `github.com/go-logr/zapr v1.3.0`
- `github.com/go-openapi/analysis v0.24.1` → [Updates: `v0.26.2`, `v1.0.0`]
- `github.com/go-openapi/errors v0.22.4` → [Updates: `v0.22.8`]
- `github.com/go-openapi/jsonpointer v0.22.4` → [Updates: `v0.24.0`, `v1.0.1`]
- `github.com/go-openapi/jsonreference v0.21.4` → [Updates: `v0.21.6`, `v1.0.2`]
- `github.com/go-openapi/loads v0.23.2` → [Updates: `v0.25.3`]
- `github.com/go-openapi/spec v0.22.1` → [Updates: `v0.22.11`, `v1.0.1`]
- `github.com/go-openapi/strfmt v0.25.0` → [Updates: `v0.27.2`]
- `github.com/go-openapi/swag v0.25.4` → [Updates: `v0.29.2`]
- `github.com/go-openapi/swag/cmdutils v0.25.4` → [Updates: `v0.29.2`]
- `github.com/go-openapi/swag/conv v0.25.4` → [Updates: `v0.29.2`]
- `github.com/go-openapi/swag/fileutils v0.25.4` → [Updates: `v0.29.2`]
- `github.com/go-openapi/swag/jsonname v0.25.4` → [Updates: `v0.29.2`]
- `github.com/go-openapi/swag/jsonutils v0.25.4` → [Updates: `v0.29.2`]
- `github.com/go-openapi/swag/loading v0.25.4` → [Updates: `v0.29.2`]
- `github.com/go-openapi/swag/mangling v0.25.4` → [Updates: `v0.29.2`]
- `github.com/go-openapi/swag/netutils v0.25.4` → [Updates: `v0.29.2`]
- `github.com/go-openapi/swag/stringutils v0.25.4` → [Updates: `v0.29.2`]
- `github.com/go-openapi/swag/typeutils v0.25.4` → [Updates: `v0.29.2`]
- `github.com/go-openapi/swag/yamlutils v0.25.4` → [Updates: `v0.29.2`]
- `github.com/go-openapi/validate v0.25.1` → [Updates: `v0.26.5`, `v1.0.0`]
- `github.com/go-viper/mapstructure/v2 v2.4.0` → [Updates: `v2.5.0`]
- `github.com/gobuffalo/flect v1.0.3`
- `github.com/goccy/go-json v0.10.5` → [Updates: `v0.10.6`]
- `github.com/gogo/protobuf v1.3.2`
- `github.com/golang/groupcache v0.0.0-20241129210726-2c02b8208cf8@2c02b8208cf8`
- `github.com/golang/protobuf v1.5.4`
- `github.com/google/flatbuffers v25.2.10+incompatible` → [Updates: `v25.12.19+incompatible`]
- `github.com/google/gnostic-models v0.7.1`
- `github.com/google/go-querystring v1.1.0` → [Updates: `v1.2.0`]
- `github.com/google/uuid v1.6.0`
- `github.com/gorilla/mux v1.8.1`
- `github.com/grafana/authlib/claims v0.0.0-20250120084028-e3328c576437@e3328c576437` → [Updates: `v0.0.0-20250120084028-e3328c576437`]
- `github.com/grafana/fleet-management-api v1.2.0` → [Updates: `v1.3.0`]
- `github.com/grafana/grafana-app-sdk/logging v0.48.1` → [Updates: `v0.59.0`]
- `github.com/grafana/grafana-plugin-sdk-go v0.275.0` → [Updates: `v0.296.4`]
- `github.com/grafana/grafana/apps/alerting/alertenrichment v0.0.0-20250925121631-89b988ca553e@89b988ca553e` → [Updates: `v0.0.85-test`, `v13.2.1`]
- `github.com/grafana/grafana/apps/alerting/rules v0.0.0-20251029161707-af8d166b909c@af8d166b909c` → [Updates: `v0.0.85-test`, `v13.2.1`]
- `github.com/grafana/grafana/apps/dashboard v0.0.0-20250424064802-2fbb2d6f5d27@2fbb2d6f5d27` → [Updates: `v0.0.85-test`, `v13.2.1`]
- `github.com/grafana/grafana/apps/playlist v0.0.0-20250424064802-2fbb2d6f5d27@2fbb2d6f5d27` → [Updates: `v0.0.85-test`, `v13.2.1`]
- `github.com/grafana/grafana/pkg/apimachinery v0.0.0-20250901080157-a0280d701b28@a0280d701b28` → [Updates: `v0.0.85-test`, `v13.2.1`]
- `github.com/grafana/otel-profiling-go v0.5.1` → [Updates: `v0.6.0`]
- `github.com/grafana/pyroscope-go/godeltaprof v0.1.8` → [Updates: `v0.1.12`]
- `github.com/grafana/river v0.3.0`
- `github.com/grpc-ecosystem/go-grpc-middleware/providers/prometheus v1.1.0`
- `github.com/grpc-ecosystem/go-grpc-middleware/v2 v2.3.2` → [Updates: `v2.3.4`]
- `github.com/grpc-ecosystem/grpc-gateway/v2 v2.27.4` → [Updates: `v2.30.0`]
- `github.com/hashicorp/errwrap v1.1.0`
- `github.com/hashicorp/go-cleanhttp v0.5.2`
- `github.com/hashicorp/go-cty v1.5.0`
- `github.com/hashicorp/go-hclog v1.6.3`
- `github.com/hashicorp/go-multierror v1.1.1`
- `github.com/hashicorp/go-plugin v1.7.0` → [Updates: `v1.8.0`]
- `github.com/hashicorp/go-retryablehttp v0.7.7` → [Updates: `v0.7.8`]
- `github.com/hashicorp/go-uuid v1.0.3`
- `github.com/hashicorp/go-version v1.8.0` → [Updates: `v1.9.0`]
- `github.com/hashicorp/hcl/v2 v2.24.0` → [Updates: `v2.25.0`]
- `github.com/hashicorp/logutils v1.0.0`
- `github.com/hashicorp/terraform-json v0.27.2` → [Updates: `v0.28.0`]
- `github.com/hashicorp/terraform-plugin-framework-jsontypes v0.2.0`
- `github.com/hashicorp/terraform-plugin-framework-validators v0.17.0` → [Updates: `v0.19.0`]
- `github.com/hashicorp/terraform-plugin-go v0.29.0` → [Updates: `v0.31.0`]
- `github.com/hashicorp/terraform-plugin-log v0.10.0` → [Updates: `v0.11.0`]
- `github.com/hashicorp/terraform-plugin-mux v0.21.0` → [Updates: `v0.23.1`]
- `github.com/hashicorp/terraform-plugin-sdk/v2 v2.38.2` → [Updates: `v2.40.1`]
- `github.com/hashicorp/terraform-registry-address v0.4.0` → [Updates: `v0.5.0`]
- `github.com/hashicorp/terraform-svchost v0.1.1` → [Updates: `v0.2.1`]
- `github.com/hashicorp/yamux v0.1.2`
- `github.com/iancoleman/strcase v0.3.0`
- `github.com/inconshreveable/mousetrap v1.1.0`
- `github.com/josharian/intern v1.0.0`
- `github.com/json-iterator/go v1.1.12`
- `github.com/jszwedko/go-datemath v0.1.1-0.20230526204004-640a500621d6@640a500621d6` → [Updates: `v0.1.1-0.20230526204004-640a500621d6`]
- `github.com/klauspost/compress v1.18.0` → [Updates: `v1.18.7`]
- `github.com/klauspost/cpuid/v2 v2.2.10` → [Updates: `v2.4.0`]
- `github.com/knadh/koanf/maps v0.1.2` → [Updates: `v0.1.3`]
- `github.com/knadh/koanf/v2 v2.3.0` → [Updates: `v2.3.6`]
- `github.com/magefile/mage v1.15.0` → [Updates: `v1.17.2`]
- `github.com/mailru/easyjson v0.9.0` → [Updates: `v0.9.2`]
- `github.com/mattetti/filebuffer v1.0.1`
- `github.com/mattn/go-colorable v0.1.14` → [Updates: `v0.1.15`]
- `github.com/mattn/go-isatty v0.0.20` → [Updates: `v0.0.24`]
- `github.com/mattn/go-runewidth v0.0.16` → [Updates: `v0.0.30`]
- `github.com/mitchellh/copystructure v1.2.0`
- `github.com/mitchellh/go-testing-interface v1.14.1`
- `github.com/mitchellh/go-wordwrap v1.0.1`
- `github.com/mitchellh/mapstructure v1.5.0`
- `github.com/mitchellh/reflectwalk v1.0.2`
- `github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd@bacd9c7ef1dd`
- `github.com/modern-go/reflect2 v1.0.3-0.20250322232337-35a7c28c31ee@35a7c28c31ee`
- `github.com/mohae/deepcopy v0.0.0-20170929034955-c48cc78d4826@c48cc78d4826`
- `github.com/munnerz/goautoneg v0.0.0-20191010083416-a7dc8b61c822@a7dc8b61c822`
- `github.com/oasdiff/yaml v0.0.0-20250309154309-f31be36b4037@f31be36b4037` → [Updates: `v0.1.1`]
- `github.com/oasdiff/yaml3 v0.0.0-20250309153720-d2182401db90@d2182401db90` → [Updates: `v0.0.14`]
- `github.com/oklog/run v1.1.0` → [Updates: `v1.2.0`]
- `github.com/oklog/ulid v1.3.1` → [Updates: `v2.1.2`]
- `github.com/olekukonko/tablewriter v0.0.5` → [Updates: `v1.1.4`]
- `github.com/pelletier/go-toml/v2 v2.2.3` → [Updates: `v2.4.3`]
- `github.com/perimeterx/marshmallow v1.1.5`
- `github.com/pierrec/lz4/v4 v4.1.22` → [Updates: `v4.1.29`]
- `github.com/pkg/errors v0.9.1`
- `github.com/pmezard/go-difflib v1.0.1-0.20181226105442-5d4384ee4fb2@5d4384ee4fb2`
- `github.com/prometheus/alertmanager v0.27.0` → [Updates: `v0.34.0`]
- `github.com/prometheus/client_golang v1.23.2` → [Updates: `v1.24.1`]
- `github.com/prometheus/client_model v0.6.2` → [Updates: `v0.6.3`]
- `github.com/prometheus/common v0.67.5` → [Updates: `v0.71.0`]
- `github.com/prometheus/procfs v0.19.2` → [Updates: `v0.22.0`]
- `github.com/rivo/uniseg v0.4.7`
- `github.com/rs/zerolog v1.34.0` → [Updates: `v1.35.1`]
- `github.com/russross/blackfriday/v2 v2.1.0`
- `github.com/spf13/afero v1.15.0`
- `github.com/spf13/cobra v1.10.2`
- `github.com/spf13/pflag v1.0.10`
- `github.com/stretchr/objx v0.5.2` → [Updates: `v0.5.3`]
- `github.com/stretchr/testify v1.11.1` → [Updates: `v1.12.1`]
- `github.com/tmccombs/hcl2json v0.6.8` → [Updates: `v0.6.9`]
- `github.com/unknwon/bra v0.0.0-20200517080246-1e3013ecaff8@1e3013ecaff8`
- `github.com/unknwon/com v1.0.1`
- `github.com/unknwon/log v0.0.0-20200308114134-929b1006e34a@929b1006e34a`
- `github.com/urfave/cli v1.22.16` → [Updates: `v1.22.17`, `v3.11.0`]
- `github.com/vmihailenco/msgpack v4.0.4+incompatible`
- `github.com/vmihailenco/msgpack/v5 v5.4.1`
- `github.com/vmihailenco/tagparser/v2 v2.0.0`
- `github.com/woodsbury/decimal128 v1.3.0` → [Updates: `v1.5.0`]
- `github.com/x448/float16 v0.8.4`
- `github.com/yuin/goldmark v1.7.7` → [Updates: `v1.7.17`]
- `github.com/zclconf/go-cty v1.17.0` → [Updates: `v1.19.0`]
- `github.com/zeebo/xxh3 v1.0.2` → [Updates: `v1.1.0`]
- `go.mongodb.org/mongo-driver v1.17.7` → [Updates: `v1.17.10`, `v2.9.1`]
- `go.opentelemetry.io/auto/sdk v1.2.1`
- `go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.63.0` → [Updates: `v0.71.0`]
- `go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace v0.60.0` → [Updates: `v0.71.0`]
- `go.opentelemetry.io/contrib/propagators/jaeger v1.35.0` → [Updates: `v1.46.0`]
- `go.opentelemetry.io/contrib/samplers/jaegerremote v0.29.0` → [Updates: `v0.37.3`]
- `go.opentelemetry.io/otel v1.43.0` → [Updates: `v1.44.0`]
- `go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.39.0` → [Updates: `v1.46.0`]
- `go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.39.0` → [Updates: `v1.46.0`]
- `go.opentelemetry.io/otel/metric v1.43.0` → [Updates: `v1.46.0`]
- `go.opentelemetry.io/otel/sdk v1.43.0` → [Updates: `v1.46.0`]
- `go.opentelemetry.io/otel/trace v1.43.0` → [Updates: `v1.46.0`]
- `go.opentelemetry.io/proto/otlp v1.9.0` → [Updates: `v1.11.0`]
- `go.uber.org/multierr v1.11.0`
- `go.uber.org/zap v1.27.1` → [Updates: `v1.28.0`]
- `go.yaml.in/yaml/v2 v2.4.3` → [Updates: `v2.4.4`, `v3.0.5`]
- `go.yaml.in/yaml/v3 v3.0.4` → [Updates: `v3.0.5`]
- `golang.org/x/exp v0.0.0-20260112195511-716be5621a96@716be5621a96` → [Updates: `v0.0.0-20260908205506-85c1c2202aba`]
- `golang.org/x/mod v0.37.0` → [Updates: `v0.40.0`]
- `golang.org/x/net v0.56.0` → [Updates: `v0.59.0`]
- `golang.org/x/oauth2 v0.34.0` → [Updates: `v0.37.0`]
- `golang.org/x/sync v0.21.0` → [Updates: `v0.23.0`]
- `golang.org/x/sys v0.46.0` → [Updates: `v0.48.0`]
- `golang.org/x/telemetry v0.0.0-20260625142307-59b4966ccb57@59b4966ccb57` → [Updates: `v0.0.0-20260910141331-15ceca2b0a1f`]
- `golang.org/x/term v0.44.0` → [Updates: `v0.46.0`]
- `golang.org/x/text v0.39.0` → [Updates: `v0.42.0`]
- `golang.org/x/time v0.14.0` → [Updates: `v0.16.0`]
- `golang.org/x/tools v0.47.0` → [Updates: `v0.50.0`]
- `golang.org/x/xerrors v0.0.0-20240903120638-7835f813f4da@7835f813f4da`
- `gomodules.xyz/jsonpatch/v2 v2.5.0` → [Updates: `v3.0.1`]
- `google.golang.org/appengine v1.6.8` → [Updates: `v2.0.6`]
- `google.golang.org/genproto/googleapis/api v0.0.0-20260114163908-3f89685c29c3@3f89685c29c3` → [Updates: `v0.0.0-20260911204522-f61a6ca850bd`]
- `google.golang.org/genproto/googleapis/rpc v0.0.0-20260203192932-546029d2fa20@546029d2fa20` → [Updates: `v0.0.0-20260911204522-f61a6ca850bd`]
- `google.golang.org/grpc v1.79.3` → [Updates: `v1.83.1`]
- `gopkg.in/evanphx/json-patch.v4 v4.13.0` → [Updates: `v5.9.11`]
- `gopkg.in/fsnotify/fsnotify.v1 v1.4.7`
- `gopkg.in/inf.v0 v0.9.1`
- `gopkg.in/validator.v2 v2.0.1`
- `gopkg.in/yaml.v2 v2.4.0` → [Updates: `v3.0.1`]
- `gopkg.in/yaml.v3 v3.0.1`
- `k8s.io/apiextensions-apiserver v0.35.0` → [Updates: `v0.37.0`]
- `k8s.io/client-go v0.35.0` → [Updates: `v0.37.0`]
- `k8s.io/code-generator v0.35.0` → [Updates: `v0.37.0`]
- `k8s.io/component-base v0.35.0` → [Updates: `v0.37.0`]
- `k8s.io/gengo/v2 v2.0.0-20251215205346-5ee0d033ba5b@5ee0d033ba5b` → [Updates: `v2.0.0-20260408192533-25e2208e0dc3`]
- `k8s.io/klog/v2 v2.130.1` → [Updates: `v2.140.0`]
- `k8s.io/kube-openapi v0.0.0-20260127142750-a19766b6e2d4@a19766b6e2d4` → [Updates: `v0.0.0-20260911184034-7970a1e230da`]
- `k8s.io/utils v0.0.0-20260108192941-914a6e750570@914a6e750570` → [Updates: `v0.0.0-20260707023825-cf1189d6abe3`]
- `sigs.k8s.io/controller-runtime v0.23.1` → [Updates: `v0.25.0`]
- `sigs.k8s.io/json v0.0.0-20250730193827-2d320260d730@2d320260d730` → [Updates: `v0.0.0-20260909141634-11ed52e25bc5`]
- `sigs.k8s.io/randfill v1.0.0`
- `sigs.k8s.io/structured-merge-diff/v6 v6.3.2-0.20260122202528-d9cc6641c482@d9cc6641c482` → [Updates: `v6.4.2`, `v7.0.0`]
- `sigs.k8s.io/yaml v1.6.0`

---
## Need help?
You can ask for more help in the following Slack channel: #proj-renovate-self-hosted. In that channel you can also find ADR and FAQ docs in the Resources section.

Start with the linked Renovate Dependency Dashboard documentation, then review the abandoned and rate-limited dependency lists in this issue. The issue does not define a specific dependency or completion criterion, so a maintainer-selected scope is needed before work can be considered done.

Written by the indexing model from the issue text.