Dependency Dashboard

This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.

## Repository Problems

Renovate tried to run on this repository, but found these problems.

- ⚠️ WARN: Package lookup failures

## Abandoned Dependencies

The following dependencies have not received updates for an extended period and may be unmaintained.

View abandoned dependencies (59)

> [!NOTE]
Packages are marked as abandoned when they exceed the [`abandonmentThreshold`](https://docs.renovatebot.com/configuration-options/#abandonmentthreshold) since their last release. Unlike deprecated packages with official notices, abandonment is detected by release inactivity.
>
| Datasource | Package | Last Updated |
|------------|------|-------------|
| gomod | [github.com/Masterminds/goutils](https://redirect.github.com/Masterminds/goutils) | `2021-02-04` |
| gomod | [github.com/Masterminds/sprig/v3](https://redirect.github.com/Masterminds/sprig) | `2024-08-29` |
| gomod | [github.com/asaskevich/govalidator](https://redirect.github.com/asaskevich/govalidator) | `2023-03-01` |
| gomod | [github.com/bboreham/go-loser](https://redirect.github.com/bboreham/go-loser) | `2023-09-20` |
| gomod | [github.com/beorn7/perks](https://redirect.github.com/beorn7/perks) | `2019-07-31` |
| gomod | [github.com/c2h5oh/datasize](https://redirect.github.com/c2h5oh/datasize) | `2023-12-15` |
| gomod | [github.com/cespare/xxhash/v2](https://redirect.github.com/cespare/xxhash) | `2024-04-04` |
| gomod | [github.com/coreos/go-semver](https://redirect.github.com/coreos/go-semver) | `2023-01-16` |
| gomod | [github.com/davecgh/go-spew](https://redirect.github.com/davecgh/go-spew) | `2018-02-21` |
| gomod | [github.com/dennwc/varint](https://redirect.github.com/dennwc/varint) | `2019-06-16` |
| gomod | [github.com/dgryski/go-rendezvous](https://redirect.github.com/dgryski/go-rendezvous) | `2020-08-23` |
| gomod | [github.com/dustin/go-humanize](https://redirect.github.com/dustin/go-humanize) | `2023-01-10` |
| gomod | [github.com/facette/natsort](https://redirect.github.com/facette/natsort) | `2018-12-10` |
| gomod | [github.com/go-kit/log](https://redirect.github.com/go-kit/log) | `2022-05-14` |
| gomod | [github.com/go-logr/stdr](https://redirect.github.com/go-logr/stdr) | `2021-12-15` |
| gomod | [github.com/gogo/googleapis](https://redirect.github.com/gogo/googleapis) | `2021-03-16` |
| gomod | [github.com/gogo/protobuf](https://redirect.github.com/gogo/protobuf) | `2021-01-10` |
| gomod | [github.com/gogo/status](https://redirect.github.com/gogo/status) | `2022-06-15` |
| gomod | [github.com/golang/protobuf](https://redirect.github.com/golang/protobuf) | `2024-03-06` |
| gomod | [github.com/google/btree](https://redirect.github.com/google/btree) | `2024-08-21` |
| gomod | [github.com/google/uuid](https://redirect.github.com/google/uuid) | `2024-01-23` |
| gomod | [github.com/gorilla/mux](https://redirect.github.com/gorilla/mux) | `2023-11-05` |
| gomod | [github.com/grafana/memberlist](https://redirect.github.com/grafana/memberlist) | `2021-11-12` |
| gomod | [github.com/hashicorp/errwrap](https://redirect.github.com/hashicorp/errwrap) | `2020-07-14` |
| gomod | [github.com/hashicorp/go-cleanhttp](https://redirect.github.com/hashicorp/go-cleanhttp) | `2021-02-03` |
| gomod | [github.com/hashicorp/go-hclog](https://redirect.github.com/hashicorp/go-hclog) | `2024-04-01` |
| gomod | [github.com/hashicorp/go-immutable-radix](https://redirect.github.com/hashicorp/go-immutable-radix) | `2023-11-21` |
| gomod | [github.com/hashicorp/go-multierror](https://redirect.github.com/hashicorp/go-multierror) | `2021-03-11` |
| gomod | [github.com/hashicorp/go-rootcerts](https://redirect.github.com/hashicorp/go-rootcerts) | `2019-12-10` |
| gomod | [github.com/hashicorp/golang-lru](https://redirect.github.com/hashicorp/golang-lru) | `2023-09-29` |
| gomod | [github.com/hashicorp/golang-lru/v2](https://redirect.github.com/hashicorp/golang-lru) | `2023-09-29` |
| gomod | [github.com/jmespath/go-jmespath](https://redirect.github.com/jmespath/go-jmespath) | `2020-09-18` |
| gomod | [github.com/josharian/intern](https://redirect.github.com/josharian/intern) | `2019-12-14` |
| gomod | [github.com/jpillora/backoff](https://redirect.github.com/jpillora/backoff) | `2019-10-03` |
| gomod | [github.com/json-iterator/go](https://redirect.github.com/json-iterator/go) | `2021-09-11` |
| gomod | [github.com/julienschmidt/httprouter](https://redirect.github.com/julienschmidt/httprouter) | `2019-09-30` |
| gomod | [github.com/kylelemons/godebug](https://redirect.github.com/kylelemons/godebug) | `2019-05-05` |
| gomod | [github.com/mitchellh/copystructure](https://redirect.github.com/mitchellh/copystructure) | `2021-05-05` |
| gomod | [github.com/mitchellh/go-homedir](https://redirect.github.com/mitchellh/go-homedir) | `2019-01-27` |
| gomod | [github.com/mitchellh/mapstructure](https://redirect.github.com/mitchellh/mapstructure) | `2022-04-20` |
| gomod | [github.com/mitchellh/reflectwalk](https://redirect.github.com/mitchellh/reflectwalk) | `2021-05-03` |
| gomod | [github.com/modern-go/concurrent](https://redirect.github.com/modern-go/concurrent) | `2018-03-06` |
| gomod | [github.com/modern-go/reflect2](https://redirect.github.com/modern-go/reflect2) | `2021-09-11` |
| gomod | [github.com/munnerz/goautoneg](https://redirect.github.com/munnerz/goautoneg) | `2019-10-10` |
| gomod | [github.com/mwitkow/go-conntrack](https://redirect.github.com/mwitkow/go-conntrack) | `2019-07-16` |
| gomod | [github.com/opentracing/opentracing-go](https://redirect.github.com/opentracing/opentracing-go) | `2020-07-01` |
| gomod | [github.com/pkg/browser](https://redirect.github.com/pkg/browser) | `2024-01-02` |
| gomod | [github.com/pkg/errors](https://redirect.github.com/pkg/errors) | `2020-01-14` |
| gomod | [github.com/pmezard/go-difflib](https://redirect.github.com/pmezard/go-difflib) | `2016-01-10` |
| gomod | [github.com/sean-/seed](https://redirect.github.com/sean-/seed) | `2017-03-13` |
| gomod | [github.com/shopspring/decimal](https://redirect.github.com/shopspring/decimal) | `2024-04-12` |
| gomod | [github.com/uber/jaeger-client-go](https://redirect.github.com/uber/jaeger-client-go) | `2021-12-07` |
| gomod | [github.com/uber/jaeger-lib](https://redirect.github.com/uber/jaeger-lib) | `2021-03-29` |
| gomod | [go.opentelemetry.io/otel/exporters/jaeger](https://redirect.github.com/open-telemetry/opentelemetry-go) | `2023-08-28` |
| gomod | [go.uber.org/atomic](https://redirect.github.com/uber-go/atomic) | `2023-05-03` |
| gomod | [go.uber.org/goleak](https://redirect.github.com/uber-go/goleak) | `2023-10-24` |
| gomod | [go.uber.org/multierr](https://redirect.github.com/uber-go/multierr) | `2023-03-29` |
| gomod | [gopkg.in/yaml.v2](https://redirect.github.com/go-yaml/yaml) | `2022-05-27` |
| gomod | [gopkg.in/yaml.v3](https://redirect.github.com/go-yaml/yaml) | `2022-05-27` |

## Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

- [ ] chore(deps): pin dependencies (`golangci/golangci-lint`, `grafana/writers-toolkit`)
- [ ] chore(deps): update golang.org/x/exp digest to 85c1c22
- [ ] chore(deps): update google.golang.org/genproto/googleapis/api digest to f61a6ca
- [ ] chore(deps): update google.golang.org/genproto/googleapis/rpc digest to f61a6ca
- [ ] chore(deps): update module github.com/go-logr/logr to v1.4.4
- [ ] chore(deps): update module github.com/golang-jwt/jwt/v5 to v5.3.1
- [ ] chore(deps): update module github.com/googleapis/enterprise-certificate-proxy to v0.3.22
- [ ] chore(deps): update module github.com/grafana/pyroscope-go/godeltaprof to v0.1.12
- [ ] chore(deps): update module github.com/hashicorp/go-msgpack/v2 to v2.1.5
- [ ] chore(deps): update module github.com/hashicorp/serf to v0.10.4
- [ ] chore(deps): update module github.com/knadh/koanf/maps to v0.1.3
- [ ] chore(deps): update module github.com/knadh/koanf/providers/confmap to v1.0.1
- [ ] chore(deps): update module github.com/knadh/koanf/v2 to v2.3.6
- [ ] chore(deps): update module github.com/mailru/easyjson to v0.9.2
- [ ] chore(deps): update module github.com/mattn/go-colorable to v0.1.15
- [ ] chore(deps): update module github.com/mattn/go-isatty to v0.0.24
- [ ] chore(deps): update module github.com/miekg/dns to v1.1.73
- [ ] chore(deps): update module github.com/oklog/ulid/v2 to v2.1.2
- [ ] chore(deps): update module github.com/opentracing-contrib/go-grpc to v0.1.4
- [ ] chore(deps): update module github.com/oschwald/maxminddb-golang to v1.13.1
- [ ] chore(deps): update module github.com/prometheus/client_model to v0.6.3
- [ ] chore(deps): update module github.com/stretchr/objx to v0.5.3
- [ ] chore(deps): update module go.yaml.in/yaml/v2 to v2.4.4
- [ ] chore(deps): update module go.yaml.in/yaml/v3 to v3.0.5
- [ ] chore(deps): update module google.golang.org/protobuf to v1.36.12
- [ ] chore(deps): update softprops/action-gh-release action to v3.0.3
- [ ] chore(deps): update actions/checkout action to v6.1.0
- [ ] chore(deps): update azure-sdk-for-go monorepo (`github.com/Azure/azure-sdk-for-go/sdk/azcore`, `github.com/Azure/azure-sdk-for-go/sdk/azidentity`, `github.com/Azure/azure-sdk-for-go/sdk/internal`)
- [ ] chore(deps): update go-openapi packages (`github.com/go-openapi/analysis`, `github.com/go-openapi/errors`, `github.com/go-openapi/jsonpointer`, `github.com/go-openapi/jsonreference`, `github.com/go-openapi/loads`, `github.com/go-openapi/spec`, `github.com/go-openapi/strfmt`, `github.com/go-openapi/swag`, `github.com/go-openapi/validate`)
- [ ] chore(deps): update golang docker tag to v1.27
- [ ] chore(deps): update kubernetes monorepo to v0.37.0 (`k8s.io/apimachinery`, `k8s.io/client-go`)
- [ ] chore(deps): update module cloud.google.com/go/auth to v0.23.2
- [ ] chore(deps): update module github.com/armon/go-metrics to v0.6.1
- [ ] chore(deps): update module github.com/azuread/microsoft-authentication-library-for-go to v1.9.0
- [ ] chore(deps): update module github.com/coreos/go-systemd/v22 to v22.7.0
- [ ] chore(deps): update module github.com/fatih/color to v1.19.0
- [ ] chore(deps): update module github.com/felixge/httpsnoop to v1.1.0
- [ ] chore(deps): update module github.com/fsnotify/fsnotify to v1.10.1
- [ ] chore(deps): update module github.com/go-viper/mapstructure/v2 to v2.5.0
- [ ] chore(deps): update module github.com/googleapis/gax-go/v2 to v2.24.1
- [ ] chore(deps): update module github.com/grafana/otel-profiling-go to v0.6.0
- [ ] chore(deps): update module github.com/grpc-ecosystem/grpc-gateway/v2 to v2.30.0
- [ ] chore(deps): update module github.com/hashicorp/consul/api to v1.34.5
- [ ] chore(deps): update module github.com/hashicorp/go-metrics to v0.6.1
- [ ] chore(deps): update module github.com/hashicorp/go-version to v1.9.0
- [ ] chore(deps): update module github.com/hashicorp/memberlist to v0.6.0
- [ ] chore(deps): update module github.com/jaegertracing/jaeger-idl to v0.12.0
- [ ] chore(deps): update module github.com/masterminds/semver/v3 to v3.5.0
- [ ] chore(deps): update module github.com/mdlayher/socket to v0.7.0
- [ ] chore(deps): update module github.com/mdlayher/vsock to v1.3.0
- [ ] chore(deps): update module github.com/open-telemetry/opentelemetry-collector-contrib/internal/exp/metrics to v0.160.0
- [ ] chore(deps): update module github.com/open-telemetry/opentelemetry-collector-contrib/pkg/pdatautil to v0.160.0
- [ ] chore(deps): update module github.com/open-telemetry/opentelemetry-collector-contrib/processor/deltatocumulativeprocessor to v0.160.0
- [ ] chore(deps): update module github.com/pires/go-proxyproto to v0.15.0
- [ ] chore(deps): update module github.com/prometheus/alertmanager to v0.34.0
- [ ] chore(deps): update module github.com/prometheus/exporter-toolkit to v0.19.0
- [ ] chore(deps): update module github.com/prometheus/procfs to v0.22.0
- [ ] chore(deps): update module github.com/prometheus/sigv4 to v0.5.0
- [ ] chore(deps): update module github.com/redis/go-redis/v9 to v9.22.0
- [ ] chore(deps): update module github.com/sony/gobreaker/v2 to v2.4.0
- [ ] chore(deps): update module github.com/spf13/cast to v1.10.0
- [ ] chore(deps): update module github.com/tjhop/slog-gokit to v0.2.2
- [ ] chore(deps): update module go.etcd.io/etcd/api/v3 to v3.7.1
- [ ] chore(deps): update module go.etcd.io/etcd/client/v3 to v3.7.1
- [ ] chore(deps): update module go.opentelemetry.io/collector/component to v1.66.0
- [ ] chore(deps): update module go.opentelemetry.io/collector/confmap to v1.66.0
- [ ] chore(deps): update module go.opentelemetry.io/collector/confmap/xconfmap to v0.160.0
- [ ] chore(deps): update module go.opentelemetry.io/collector/consumer to v1.66.0
- [ ] chore(deps): update module go.opentelemetry.io/collector/featuregate to v1.66.0
- [ ] chore(deps): update module go.opentelemetry.io/collector/pdata to v1.66.0
- [ ] chore(deps): update module go.opentelemetry.io/collector/pipeline to v1.66.0
- [ ] chore(deps): update module go.opentelemetry.io/collector/processor to v1.66.0
- [ ] chore(deps): update module go.opentelemetry.io/proto/otlp to v1.11.0
- [ ] chore(deps): update module go.uber.org/zap to v1.28.0
- [ ] chore(deps): update module golang.org/x/net to v0.59.0
- [ ] chore(deps): update module golang.org/x/oauth2 to v0.37.0
- [ ] chore(deps): update module golang.org/x/sync to v0.23.0
- [ ] chore(deps): update module golang.org/x/sys to v0.48.0
- [ ] chore(deps): update module golang.org/x/text to v0.42.0
- [ ] chore(deps): update module golang.org/x/time to v0.16.0
- [ ] chore(deps): update module golang.org/x/tools to v0.50.0
- [ ] chore(deps): update module google.golang.org/api to v0.297.0
- [ ] chore(deps): update module k8s.io/klog/v2 to v2.140.0
- [ ] chore(deps): update opentelemetry-go monorepo (`go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc`, `go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp`, `go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc`, `go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp`, `go.opentelemetry.io/otel/exporters/otlp/otlptrace`, `go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc`, `go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp`, `go.opentelemetry.io/otel/exporters/prometheus`, `go.opentelemetry.io/otel/exporters/stdout/stdoutlog`, `go.opentelemetry.io/otel/exporters/stdout/stdoutmetric`, `go.opentelemetry.io/otel/exporters/stdout/stdouttrace`, `go.opentelemetry.io/otel/log`, `go.opentelemetry.io/otel/metric`, `go.opentelemetry.io/otel/sdk`, `go.opentelemetry.io/otel/sdk/log`, `go.opentelemetry.io/otel/sdk/metric`, `go.opentelemetry.io/otel/trace`)
- [ ] chore(deps): update opentelemetry-go-contrib monorepo (`go.opentelemetry.io/contrib/bridges/prometheus`, `go.opentelemetry.io/contrib/exporters/autoexport`, `go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc`, `go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace`, `go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp`, `go.opentelemetry.io/contrib/propagators/jaeger`, `go.opentelemetry.io/contrib/samplers/jaegerremote`)
- [ ] chore(deps): update scottbrenner/cfn-lint-action action to v2.8.0
- [ ] fix(deps): update aws-sdk-go-v2 monorepo (`github.com/aws/aws-sdk-go-v2`, `github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream`, `github.com/aws/aws-sdk-go-v2/config`, `github.com/aws/aws-sdk-go-v2/credentials`, `github.com/aws/aws-sdk-go-v2/feature/ec2/imds`, `github.com/aws/aws-sdk-go-v2/internal/configsources`, `github.com/aws/aws-sdk-go-v2/internal/endpoints/v2`, `github.com/aws/aws-sdk-go-v2/internal/v4a`, `github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding`, `github.com/aws/aws-sdk-go-v2/service/internal/checksum`, `github.com/aws/aws-sdk-go-v2/service/internal/presigned-url`, `github.com/aws/aws-sdk-go-v2/service/internal/s3shared`, `github.com/aws/aws-sdk-go-v2/service/s3`, `github.com/aws/aws-sdk-go-v2/service/secretsmanager`, `github.com/aws/aws-sdk-go-v2/service/signin`, `github.com/aws/aws-sdk-go-v2/service/ssm`, `github.com/aws/aws-sdk-go-v2/service/sso`, `github.com/aws/aws-sdk-go-v2/service/ssooidc`, `github.com/aws/aws-sdk-go-v2/service/sts`)
- [ ] fix(deps): update module github.com/aws/aws-lambda-go to v1.55.0
- [ ] fix(deps): update module github.com/aws/smithy-go to v1.28.1
- [ ] fix(deps): update module github.com/grafana/loki/v3 to v3.7.7
- [ ] fix(deps): update module github.com/prometheus/client_golang to v1.24.1
- [ ] fix(deps): update module github.com/prometheus/common to v0.71.0
- [ ] fix(deps): update module github.com/stretchr/testify to v1.12.1
- [ ] chore(deps): update actions/checkout action to v7
- [ ] chore(deps): update actions/setup-go action to v7
- [ ] chore(deps): update go-openapi packages to v1 (`github.com/go-openapi/analysis`, `github.com/go-openapi/jsonpointer`, `github.com/go-openapi/jsonreference`, `github.com/go-openapi/spec`, `github.com/go-openapi/validate`)
- [ ] chore(deps): update module github.com/cenkalti/backoff/v5 to v7
- [ ] chore(deps): update module github.com/gobwas/glob to v1
- [ ] chore(deps): update module github.com/hashicorp/consul/api to v2
- [ ] chore(deps): update module github.com/hashicorp/go-immutable-radix to v2
- [ ] chore(deps): update module github.com/hashicorp/golang-lru to v2
- [ ] chore(deps): update module github.com/oklog/ulid to v2
- [ ] chore(deps): update module github.com/oschwald/geoip2-golang to v2
- [ ] chore(deps): update module github.com/oschwald/maxminddb-golang to v2
- [ ] chore(deps): update module github.com/puzpuzpuz/xsync/v3 to v4
- [ ] chore(deps): update module go.yaml.in/yaml/v2 to v3
- [ ] chore(deps): update module gopkg.in/yaml.v2 to v3
- [ ] chore(deps): lock file maintenance
- [ ] 🔐 **Create all rate-limited PRs at once** 🔐

## Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

- [ ] [chore(deps): update github.com/grafana/gomemcache digest to 9448343](../pull/209)
- [ ] chore(deps): update github.com/grafana/jsonparser digest to 5f43846
- [ ] chore(deps): update github.com/mitchellh/mapstructure digest to 8508981
- [ ] chore(deps): update github.com/prometheus/client_golang/exp digest to d2f148b
- [ ] [fix(deps): update github.com/grafana/dskit digest to 407dda1](../pull/172)
- [ ] chore(deps): update module github.com/huandu/xstrings to v1.6.0

---

> [!WARNING]
> Renovate failed to look up the following dependencies: `Failed to look up github-tags package aquasecurity/trivy-action: no-result`.
>
> Files affected: `.github/workflows/docker.yml`

---

## Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

- [ ] [fix(security/unknown/): update module github.com/klauspost/compress to v1.18.7 [security]](../pull/201)
- [ ] [fix(security/unknown/): update module go.etcd.io/etcd/client/pkg/v3 to v3.6.14 [security]](../pull/205)
- [ ] [fix(security/unknown/): update module go.mongodb.org/mongo-driver to v1.17.7 [security]](../pull/189)
- [ ] [fix(security/unknown/): update module github.com/prometheus/prometheus to v0.311.3 [security]](../pull/176)
- [ ] [fix(security/unknown/): update module go.opentelemetry.io/otel to v1.44.0 [security]](../pull/199)
- [ ] [fix(security/unknown/): update module golang.org/x/crypto to v0.56.0 [security]](../pull/206)
- [ ] [fix(security/unknown/): update module golang.org/x/mod to v0.40.0 [security]](../pull/204)
- [ ] [fix(security/unknown/): update module google.golang.org/grpc to v1.83.1 [security]](../pull/208)
- [ ] [chore(deps): update actions/checkout digest to d23441a](../pull/180)
- [ ] [chore(deps): update go4.org/netipx digest to 3075585](../pull/198)
- [ ] [chore(deps): update golang:1.26-alpine docker digest to ce864e7](../pull/181)
- [ ] [chore(deps): update golangci/golangci-lint-action digest to ba0d7d2](../pull/171)
- [ ] [chore(deps): update k8s.io/utils digest to cf1189d](../pull/210)
- [ ] [chore(deps): update grafana/shared-workflows/aws-auth action to v1.0.5](../pull/211)
- [ ] [chore(deps): update dependency golangci/golangci-lint to v2.13.2](../pull/174)
- [ ] [chore(deps): update github/codeql-action action to v4.38.0](../pull/175)
- [ ] **Click on this checkbox to rebase all open PRs at once**

## PR Closed (Blocked)

The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.

- [ ] [chore(deps): update github.com/grafana/memberlist digest to 1798cf4](../pull/144)
- [ ] [fix(deps): update module github.com/grafana/loki/pkg/push to v0.4.0](../pull/74)
- [ ] [fix(deps): update module github.com/grafana/loki/pkg/push to v3](../pull/75)

## Vulnerabilities

> [!IMPORTANT]
> `24`/`25` CVEs have Renovate fixes.

gomod

go.mod

github.com/prometheus/prometheus

- [GHSA-8rm2-7qqf-34qm](https://osv.dev/vulnerability/GHSA-8rm2-7qqf-34qm) (fixed in >= 0.311.3)
- [GHSA-fw8g-cg8f-9j28](https://osv.dev/vulnerability/GHSA-fw8g-cg8f-9j28) (fixed in >= 0.311.3)
- [GHSA-vffh-x6r8-xx99](https://osv.dev/vulnerability/GHSA-vffh-x6r8-xx99) (fixed in >= 0.311.2-0.20260410083055-07c6232d159b)
- [GHSA-wg65-39gg-5wfj](https://osv.dev/vulnerability/GHSA-wg65-39gg-5wfj) (fixed in >= 0.311.3)
- [GO-2026-5264](https://osv.dev/vulnerability/GO-2026-5264) (fixed in >= 0.311.3)
- [GO-2026-5381](https://osv.dev/vulnerability/GO-2026-5381) (fixed in >= 0.311.3)
- [GO-2026-5662](https://osv.dev/vulnerability/GO-2026-5662) (fixed in >= 0.311.2-0.20260410083055-07c6232d159b)
- [GO-2026-5710](https://osv.dev/vulnerability/GO-2026-5710) (fixed in >= 0.311.3)

github.com/klauspost/compress

- [GO-2026-5841](https://osv.dev/vulnerability/GO-2026-5841) (fixed in >= 1.18.7)

go.etcd.io/etcd/client/pkg/v3

- [GO-2026-6107](https://osv.dev/vulnerability/GO-2026-6107) (fixed in >= 3.6.14)

go.mongodb.org/mongo-driver

- [GHSA-cp6g-7hqx-qxhp](https://osv.dev/vulnerability/GHSA-cp6g-7hqx-qxhp) (fixed in >= 1.17.7)
- [GO-2026-5327](https://osv.dev/vulnerability/GO-2026-5327) (fixed in >= 1.17.7)

go.opentelemetry.io/otel

- [GO-2026-5158](https://osv.dev/vulnerability/GO-2026-5158) (fixed in >= 1.44.0)

golang.org/x/crypto

- [GO-2026-5932](https://osv.dev/vulnerability/GO-2026-5932)
- [GO-2026-6303](https://osv.dev/vulnerability/GO-2026-6303) (fixed in >= 0.55.0)
- [GO-2026-6354](https://osv.dev/vulnerability/GO-2026-6354) (fixed in >= 0.56.0)
- [GO-2026-6355](https://osv.dev/vulnerability/GO-2026-6355) (fixed in >= 0.56.0)

golang.org/x/mod

- [GO-2026-6179](https://osv.dev/vulnerability/GO-2026-6179) (fixed in >= 0.40.0)
- [GO-2026-6180](https://osv.dev/vulnerability/GO-2026-6180) (fixed in >= 0.40.0)

google.golang.org/grpc

- [GHSA-2v4p-qf9q-27wj](https://osv.dev/vulnerability/GHSA-2v4p-qf9q-27wj) (fixed in >= 1.82.2)
- [GHSA-qc2q-p7wx-3px3](https://osv.dev/vulnerability/GHSA-qc2q-p7wx-3px3) (fixed in >= 1.83.1)
- [GHSA-vp52-pcj8-j9qc](https://osv.dev/vulnerability/GHSA-vp52-pcj8-j9qc) (fixed in >= 1.83.1)
- [GO-2026-6348](https://osv.dev/vulnerability/GO-2026-6348) (fixed in >= 1.83.1)
- [GO-2026-6441](https://osv.dev/vulnerability/GO-2026-6441) (fixed in >= 1.83.1)
- [GO-2026-6443](https://osv.dev/vulnerability/GO-2026-6443) (fixed in >= 1.82.2)

## Detected Dependencies

dockerfile (1)

Dockerfile (2)

- `golang 1.26-alpine@sha256:91eda9776261207ea25fd06b5b7fed8d397dd2c0a283e77f2ab6e91bfa71079d` → [Updates: `1.27-alpine`, `1.26-alpine`]
- `public.ecr.aws/lambda/provided al2023.2026.02.27.21@sha256:9ee3f032d4063febdf42a2a1f15149ce8358130753e48fcaf86eae731fab38ff`

github-actions (6)

.github/workflows/cloudformation.yml (2)

- `actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd` → [Updates: `v7`, `v6`]
- `scottbrenner/cfn-lint-action v2.7.1@ed184e91f5085a2932501da8314e899e5e0ef5be` → [Updates: `v2.8.0`]

.github/workflows/docker.yml (3)

- `actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd` → [Updates: `v7`, `v6`]
- `aquasecurity/trivy-action 0.35.0@97e0b3872f55f89b95b2f65b3dbab56962816478`
- `github/codeql-action v4.35.2@95e58e9a2cdfd71adc6e0353d5c52f41a045d225` → [Updates: `v4.38.0`]

.github/workflows/docs-ci.yml (3)

- `actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd` → [Updates: `v6.1.0`, `v7.0.1`]
- `step-security/changed-files v47.0.5@2e07db73e5ccdb319b9a6c7766bd46d39d304bad`
- `grafana/writers-toolkit main` → [Updates: `main`]

.github/workflows/go.yml (4)

- `actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd` → [Updates: `v7`, `v6`]
- `actions/setup-go v6@924ae3a1cded613372ab5595356fb5720e22ba16` → [Updates: `v7`]
- `golangci/golangci-lint-action v9@1e7e51e771db61008b38414a730f564565cf7c20` → [Updates: `v9`]
- `golangci/golangci-lint v2.11.4` → [Updates: `v2.13.2`, `v2.11.4`]

.github/workflows/issues.yml

.github/workflows/release.yml (5)

- `actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd` → [Updates: `v7`, `v6`]
- `actions/setup-go v6@924ae3a1cded613372ab5595356fb5720e22ba16` → [Updates: `v7`]
- `grafana/shared-workflows aws-auth/v1.0.3@85022085ed5314601c05d10e846de56bdd71e369` → [Updates: `aws-auth/v1.0.5`]
- `grafana/shared-workflows aws-auth/v1.0.3@85022085ed5314601c05d10e846de56bdd71e369` → [Updates: `aws-auth/v1.0.5`]
- `softprops/action-gh-release v3.0.0@b4309332981a82ec1c5618f44dd2e27cc8bfbfda` → [Updates: `v3.0.3`]

gomod (1)

go.mod (236)

- `go 1.25.7`
- `github.com/aws/aws-lambda-go v1.54.0` → [Updates: `v1.55.0`]
- `github.com/aws/aws-sdk-go-v2 v1.42.1` → [Updates: `v1.47.0`]
- `github.com/aws/aws-sdk-go-v2/config v1.32.30` → [Updates: `v1.33.4`]
- `github.com/aws/aws-sdk-go-v2/service/s3 v1.105.2` → [Updates: `v1.113.1`]
- `github.com/aws/aws-sdk-go-v2/service/secretsmanager v1.43.1` → [Updates: `v1.49.0`]
- `github.com/aws/aws-sdk-go-v2/service/ssm v1.72.0` → [Updates: `v1.78.0`]
- `github.com/aws/smithy-go v1.27.3` → [Updates: `v1.28.1`]
- `github.com/go-kit/log v0.2.1`
- `github.com/gogo/protobuf v1.3.2`
- `github.com/golang/snappy v1.0.0`
- `github.com/grafana/dskit v0.0.0-20260324093927-3167f499dfc0@3167f499dfc0` → [Updates: `v0.0.0-20260324093927-3167f499dfc0`]
- `github.com/grafana/loki/pkg/push v0.0.0-20260106103740-2203c1d8e8fa@2203c1d8e8fa` → [Updates: `v0.4.0`, `v3.7.7`]
- `github.com/grafana/loki/v3 v3.6.8` → [Updates: `v3.7.7`]
- `github.com/grafana/regexp v0.0.0-20250905093917-f7b3be9d1853@f7b3be9d1853`
- `github.com/pkg/errors v0.9.1`
- `github.com/prometheus/client_golang v1.23.2` → [Updates: `v1.24.1`]
- `github.com/prometheus/common v0.67.5` → [Updates: `v0.71.0`]
- `github.com/prometheus/prometheus v0.308.1` → [Updates: `v0.311.3`]
- `github.com/stretchr/testify v1.11.1` → [Updates: `v1.12.1`]
- `cloud.google.com/go/auth v0.17.0` → [Updates: `v0.23.2`]
- `cloud.google.com/go/auth/oauth2adapt v0.2.8`
- `cloud.google.com/go/compute/metadata v0.9.0`
- `dario.cat/mergo v1.0.2`
- `github.com/Azure/azure-sdk-for-go/sdk/azcore v1.19.1` → [Updates: `v1.23.1`]
- `github.com/Azure/azure-sdk-for-go/sdk/azidentity v1.12.0` → [Updates: `v1.14.1`]
- `github.com/Azure/azure-sdk-for-go/sdk/internal v1.11.2` → [Updates: `v1.12.0`]
- `github.com/AzureAD/microsoft-authentication-library-for-go v1.5.0` → [Updates: `v1.9.0`]
- `github.com/Masterminds/goutils v1.1.1`
- `github.com/Masterminds/semver/v3 v3.3.1` → [Updates: `v3.5.0`]
- `github.com/Masterminds/sprig/v3 v3.3.0`
- `github.com/alecthomas/units v0.0.0-20240927000941-0f3dac36c52b@0f3dac36c52b`
- `github.com/armon/go-metrics v0.4.1` → [Updates: `v0.6.1`]
- `github.com/asaskevich/govalidator v0.0.0-20230301143203-a9d515a09cc2@a9d515a09cc2`
- `github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream v1.7.14` → [Updates: `v1.7.20`]
- `github.com/aws/aws-sdk-go-v2/credentials v1.19.29` → [Updates: `v1.20.4`]
- `github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.18.30` → [Updates: `v1.20.0`]
- `github.com/aws/aws-sdk-go-v2/internal/configsources v1.4.30` → [Updates: `v1.5.3`]
- `github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.7.30` → [Updates: `v2.8.3`]
- `github.com/aws/aws-sdk-go-v2/internal/v4a v1.4.31` → [Updates: `v1.5.3`]
- `github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.13.13` → [Updates: `v1.13.19`]
- `github.com/aws/aws-sdk-go-v2/service/internal/checksum v1.9.23` → [Updates: `v1.11.3`]
- `github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.13.30` → [Updates: `v1.14.3`]
- `github.com/aws/aws-sdk-go-v2/service/internal/s3shared v1.19.31` → [Updates: `v1.20.3`]
- `github.com/aws/aws-sdk-go-v2/service/signin v1.4.1` → [Updates: `v1.10.0`]
- `github.com/aws/aws-sdk-go-v2/service/sso v1.32.1` → [Updates: `v1.38.0`]
- `github.com/aws/aws-sdk-go-v2/service/ssooidc v1.37.1` → [Updates: `v1.43.0`]
- `github.com/aws/aws-sdk-go-v2/service/sts v1.44.1` → [Updates: `v1.50.0`]
- `github.com/bboreham/go-loser v0.0.0-20230920113527-fcc2c21820a3@fcc2c21820a3`
- `github.com/beorn7/perks v1.0.1`
- `github.com/c2h5oh/datasize v0.0.0-20231215233829-aa82cc1e6500@aa82cc1e6500`
- `github.com/cenkalti/backoff/v5 v5.0.3` → [Updates: `v7.0.0`]
- `github.com/cespare/xxhash/v2 v2.3.0`
- `github.com/coreos/go-semver v0.3.1`
- `github.com/coreos/go-systemd/v22 v22.6.0` → [Updates: `v22.7.0`]
- `github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc@d8f796af33cc`
- `github.com/dennwc/varint v1.0.0`
- `github.com/dgryski/go-rendezvous v0.0.0-20200823014737-9f7001d12a5f@9f7001d12a5f`
- `github.com/dustin/go-humanize v1.0.1`
- `github.com/edsrzf/mmap-go v1.2.0`
- `github.com/facette/natsort v0.0.0-20181210072756-2cd4dd1e2dcb@2cd4dd1e2dcb`
- `github.com/fatih/color v1.18.0` → [Updates: `v1.19.0`]
- `github.com/felixge/httpsnoop v1.0.4` → [Updates: `v1.1.0`]
- `github.com/fsnotify/fsnotify v1.9.0` → [Updates: `v1.10.1`]
- `github.com/go-logfmt/logfmt v0.6.1`
- `github.com/go-logr/logr v1.4.3` → [Updates: `v1.4.4`]
- `github.com/go-logr/stdr v1.2.2`
- `github.com/go-openapi/analysis v0.23.0` → [Updates: `v0.26.2`, `v1.0.0`]
- `github.com/go-openapi/errors v0.22.3` → [Updates: `v0.22.8`]
- `github.com/go-openapi/jsonpointer v0.21.0` → [Updates: `v0.24.0`, `v1.0.1`]
- `github.com/go-openapi/jsonreference v0.21.0` → [Updates: `v0.21.6`, `v1.0.2`]
- `github.com/go-openapi/loads v0.22.0` → [Updates: `v0.25.3`]
- `github.com/go-openapi/spec v0.21.0` → [Updates: `v0.22.11`, `v1.0.1`]
- `github.com/go-openapi/strfmt v0.24.0` → [Updates: `v0.27.2`]
- `github.com/go-openapi/swag v0.23.0` → [Updates: `v0.29.2`]
- `github.com/go-openapi/validate v0.24.0` → [Updates: `v0.26.5`, `v1.0.0`]
- `github.com/go-viper/mapstructure/v2 v2.4.0` → [Updates: `v2.5.0`]
- `github.com/gobwas/glob v0.2.3` → [Updates: `v1.0.0`]
- `github.com/gogo/googleapis v1.4.1`
- `github.com/gogo/status v1.1.1`
- `github.com/golang-jwt/jwt/v5 v5.3.0` → [Updates: `v5.3.1`]
- `github.com/golang/protobuf v1.5.4`
- `github.com/google/btree v1.1.3`
- `github.com/google/go-cmp v0.7.0`
- `github.com/google/s2a-go v0.1.9`
- `github.com/google/uuid v1.6.0`
- `github.com/googleapis/enterprise-certificate-proxy v0.3.6` → [Updates: `v0.3.22`]
- `github.com/googleapis/gax-go/v2 v2.15.0` → [Updates: `v2.24.1`]
- `github.com/gorilla/mux v1.8.1`
- `github.com/grafana/gomemcache v0.0.0-20251127154401-74f93547077b@74f93547077b` → [Updates: `v0.0.0-20251127154401-74f93547077b`]
- `github.com/grafana/jsonparser v0.0.0-20241004153430-023329977675@023329977675` → [Updates: `v0.0.0-20241004153430-023329977675`]
- `github.com/grafana/otel-profiling-go v0.5.1` → [Updates: `v0.6.0`]
- `github.com/grafana/pyroscope-go/godeltaprof v0.1.9` → [Updates: `v0.1.12`]
- `github.com/grpc-ecosystem/grpc-gateway/v2 v2.28.0` → [Updates: `v2.30.0`]
- `github.com/hashicorp/consul/api v1.33.4` → [Updates: `v1.34.5`, `v2.0.0`]
- `github.com/hashicorp/errwrap v1.1.0`
- `github.com/hashicorp/go-cleanhttp v0.5.2`
- `github.com/hashicorp/go-hclog v1.6.3`
- `github.com/hashicorp/go-immutable-radix v1.3.1` → [Updates: `v2.1.0`]
- `github.com/hashicorp/go-metrics v0.5.4` → [Updates: `v0.6.1`]
- `github.com/hashicorp/go-msgpack/v2 v2.1.2` → [Updates: `v2.1.5`]
- `github.com/hashicorp/go-multierror v1.1.1`
- `github.com/hashicorp/go-rootcerts v1.0.2`
- `github.com/hashicorp/go-sockaddr v1.0.7`
- `github.com/hashicorp/go-version v1.7.0` → [Updates: `v1.9.0`]
- `github.com/hashicorp/golang-lru v1.0.2` → [Updates: `v2.0.7`]
- `github.com/hashicorp/golang-lru/v2 v2.0.7`
- `github.com/hashicorp/memberlist v0.5.3` → [Updates: `v0.6.0`]
- `github.com/hashicorp/serf v0.10.2` → [Updates: `v0.10.4`]
- `github.com/huandu/xstrings v1.5.0` → [Updates: `v1.6.0`]
- `github.com/jaegertracing/jaeger-idl v0.6.0` → [Updates: `v0.12.0`]
- `github.com/jmespath/go-jmespath v0.4.0`
- `github.com/josharian/intern v1.0.0`
- `github.com/jpillora/backoff v1.0.0`
- `github.com/json-iterator/go v1.1.12`
- `github.com/julienschmidt/httprouter v1.3.0`
- `github.com/klauspost/compress v1.18.2` → [Updates: `v1.18.7`]
- `github.com/knadh/koanf/maps v0.1.2` → [Updates: `v0.1.3`]
- `github.com/knadh/koanf/providers/confmap v1.0.0` → [Updates: `v1.0.1`]
- `github.com/knadh/koanf/v2 v2.3.0` → [Updates: `v2.3.6`]
- `github.com/kylelemons/godebug v1.1.0`
- `github.com/mailru/easyjson v0.9.0` → [Updates: `v0.9.2`]
- `github.com/mattn/go-colorable v0.1.14` → [Updates: `v0.1.15`]
- `github.com/mattn/go-isatty v0.0.20` → [Updates: `v0.0.24`]
- `github.com/mdlayher/socket v0.5.1` → [Updates: `v0.7.0`]
- `github.com/mdlayher/vsock v1.2.1` → [Updates: `v1.3.0`]
- `github.com/miekg/dns v1.1.72` → [Updates: `v1.1.73`]
- `github.com/mitchellh/copystructure v1.2.0`
- `github.com/mitchellh/go-homedir v1.1.0`
- `github.com/mitchellh/mapstructure v1.5.1-0.20220423185008-bf980b35cac4@bf980b35cac4` → [Updates: `v1.5.1-0.20220423185008-bf980b35cac4`]
- `github.com/mitchellh/reflectwalk v1.0.2`
- `github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd@bacd9c7ef1dd`
- `github.com/modern-go/reflect2 v1.0.3-0.20250322232337-35a7c28c31ee@35a7c28c31ee`
- `github.com/munnerz/goautoneg v0.0.0-20191010083416-a7dc8b61c822@a7dc8b61c822`
- `github.com/mwitkow/go-conntrack v0.0.0-20190716064945-2f068394615f@2f068394615f`
- `github.com/oklog/ulid v1.3.1` → [Updates: `v2.1.2`]
- `github.com/oklog/ulid/v2 v2.1.1` → [Updates: `v2.1.2`]
- `github.com/open-telemetry/opentelemetry-collector-contrib/internal/exp/metrics v0.139.0` → [Updates: `v0.160.0`]
- `github.com/open-telemetry/opentelemetry-collector-contrib/pkg/pdatautil v0.139.0` → [Updates: `v0.160.0`]
- `github.com/open-telemetry/opentelemetry-collector-contrib/processor/deltatocumulativeprocessor v0.139.0` → [Updates: `v0.160.0`]
- `github.com/opentracing-contrib/go-grpc v0.1.2` → [Updates: `v0.1.4`]
- `github.com/opentracing-contrib/go-stdlib v1.1.1`
- `github.com/opentracing/opentracing-go v1.2.1-0.20220228012449-10b1cf09e00b@10b1cf09e00b`
- `github.com/oschwald/geoip2-golang v1.13.0` → [Updates: `v2.4.0`]
- `github.com/oschwald/maxminddb-golang v1.13.0` → [Updates: `v1.13.1`, `v2.6.0`]
- `github.com/pires/go-proxyproto v0.11.0` → [Updates: `v0.15.0`]
- `github.com/pkg/browser v0.0.0-20240102092130-5ac0b6a4141c@5ac0b6a4141c`
- `github.com/pmezard/go-difflib v1.0.1-0.20181226105442-5d4384ee4fb2@5d4384ee4fb2`
- `github.com/prometheus/alertmanager v0.28.1` → [Updates: `v0.34.0`]
- `github.com/prometheus/client_golang/exp v0.0.0-20251212205219-7ba246a648ca@7ba246a648ca` → [Updates: `v0.0.0-20260914085653-d2f148ba5de4`]
- `github.com/prometheus/client_model v0.6.2` → [Updates: `v0.6.3`]
- `github.com/prometheus/exporter-toolkit v0.15.1` → [Updates: `v0.19.0`]
- `github.com/prometheus/otlptranslator v1.0.0`
- `github.com/prometheus/procfs v0.19.2` → [Updates: `v0.22.0`]
- `github.com/prometheus/sigv4 v0.3.0` → [Updates: `v0.5.0`]
- `github.com/puzpuzpuz/xsync/v3 v3.5.1` → [Updates: `v4.5.0`]
- `github.com/redis/go-redis/v9 v9.10.0` → [Updates: `v9.22.0`]
- `github.com/sean-/seed v0.0.0-20170313163322-e2103e2c3529@e2103e2c3529`
- `github.com/sercand/kuberesolver/v6 v6.0.1`
- `github.com/shopspring/decimal v1.4.0`
- `github.com/sony/gobreaker/v2 v2.3.0` → [Updates: `v2.4.0`]
- `github.com/spf13/cast v1.7.1` → [Updates: `v1.10.0`]
- `github.com/stretchr/objx v0.5.2` → [Updates: `v0.5.3`]
- `github.com/tjhop/slog-gokit v0.1.4` → [Updates: `v0.2.2`]
- `github.com/uber/jaeger-client-go v2.30.0+incompatible`
- `github.com/uber/jaeger-lib v2.4.1+incompatible`
- `go.etcd.io/etcd/api/v3 v3.6.8` → [Updates: `v3.7.1`]
- `go.etcd.io/etcd/client/pkg/v3 v3.6.8` → [Updates: `v3.6.14`]
- `go.etcd.io/etcd/client/v3 v3.6.8` → [Updates: `v3.7.1`]
- `go.mongodb.org/mongo-driver v1.17.4` → [Updates: `v1.17.7`]
- `go.opentelemetry.io/auto/sdk v1.2.1`
- `go.opentelemetry.io/collector/component v1.45.0` → [Updates: `v1.66.0`]
- `go.opentelemetry.io/collector/confmap v1.45.0` → [Updates: `v1.66.0`]
- `go.opentelemetry.io/collector/confmap/xconfmap v0.139.0` → [Updates: `v0.160.0`]
- `go.opentelemetry.io/collector/consumer v1.45.0` → [Updates: `v1.66.0`]
- `go.opentelemetry.io/collector/featuregate v1.45.0` → [Updates: `v1.66.0`]
- `go.opentelemetry.io/collector/pdata v1.45.0` → [Updates: `v1.66.0`]
- `go.opentelemetry.io/collector/pipeline v1.45.0` → [Updates: `v1.66.0`]
- `go.opentelemetry.io/collector/processor v1.45.0` → [Updates: `v1.66.0`]
- `go.opentelemetry.io/collector/semconv v0.128.0`
- `go.opentelemetry.io/contrib/bridges/prometheus v0.66.0` → [Updates: `v0.71.0`]
- `go.opentelemetry.io/contrib/exporters/autoexport v0.66.0` → [Updates: `v0.71.0`]
- `go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.66.0` → [Updates: `v0.71.0`]
- `go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace v0.66.0` → [Updates: `v0.71.0`]
- `go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.66.0` → [Updates: `v0.71.0`]
- `go.opentelemetry.io/contrib/propagators/jaeger v1.41.0` → [Updates: `v1.46.0`]
- `go.opentelemetry.io/contrib/samplers/jaegerremote v0.35.0` → [Updates: `v0.37.3`]
- `go.opentelemetry.io/otel v1.43.0` → [Updates: `v1.44.0`]
- `go.opentelemetry.io/otel/exporters/jaeger v1.17.0`
- `go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc v0.17.0` → [Updates: `v0.22.0`]
- `go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp v0.19.0` → [Updates: `v0.22.0`]
- `go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc v1.41.0` → [Updates: `v1.46.0`]
- `go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp v1.43.0` → [Updates: `v1.46.0`]
- `go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.43.0` → [Updates: `v1.46.0`]
- `go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.41.0` → [Updates: `v1.46.0`]
- `go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.43.0` → [Updates: `v1.46.0`]
- `go.opentelemetry.io/otel/exporters/prometheus v0.63.0` → [Updates: `v0.68.0`]
- `go.opentelemetry.io/otel/exporters/stdout/stdoutlog v0.17.0` → [Updates: `v0.22.0`]
- `go.opentelemetry.io/otel/exporters/stdout/stdoutmetric v1.41.0` → [Updates: `v1.46.0`]
- `go.opentelemetry.io/otel/exporters/stdout/stdouttrace v1.41.0` → [Updates: `v1.46.0`]
- `go.opentelemetry.io/otel/log v0.19.0` → [Updates: `v0.22.0`]
- `go.opentelemetry.io/otel/metric v1.43.0` → [Updates: `v1.46.0`]
- `go.opentelemetry.io/otel/sdk v1.43.0` → [Updates: `v1.46.0`]
- `go.opentelemetry.io/otel/sdk/log v0.19.0` → [Updates: `v0.22.0`]
- `go.opentelemetry.io/otel/sdk/metric v1.43.0` → [Updates: `v1.46.0`]
- `go.opentelemetry.io/otel/trace v1.43.0` → [Updates: `v1.46.0`]
- `go.opentelemetry.io/proto/otlp v1.10.0` → [Updates: `v1.11.0`]
- `go.uber.org/atomic v1.11.0`
- `go.uber.org/goleak v1.3.0`
- `go.uber.org/multierr v1.11.0`
- `go.uber.org/zap v1.27.0` → [Updates: `v1.28.0`]
- `go.yaml.in/yaml/v2 v2.4.3` → [Updates: `v2.4.4`, `v3.0.5`]
- `go.yaml.in/yaml/v3 v3.0.4` → [Updates: `v3.0.5`]
- `go4.org/netipx v0.0.0-20230125063823-8449b0a6169f@8449b0a6169f` → [Updates: `v0.0.0-20260823151212-3075585bcbeb`]
- `golang.org/x/crypto v0.53.0` → [Updates: `v0.56.0`]
- `golang.org/x/exp v0.0.0-20260218203240-3dfff04db8fa@3dfff04db8fa` → [Updates: `v0.0.0-20260908205506-85c1c2202aba`]
- `golang.org/x/mod v0.37.0` → [Updates: `v0.40.0`]
- `golang.org/x/net v0.56.0` → [Updates: `v0.59.0`]
- `golang.org/x/oauth2 v0.36.0` → [Updates: `v0.37.0`]
- `golang.org/x/sync v0.21.0` → [Updates: `v0.23.0`]
- `golang.org/x/sys v0.46.0` → [Updates: `v0.48.0`]
- `golang.org/x/text v0.39.0` → [Updates: `v0.42.0`]
- `golang.org/x/time v0.15.0` → [Updates: `v0.16.0`]
- `golang.org/x/tools v0.47.0` → [Updates: `v0.50.0`]
- `google.golang.org/api v0.252.0` → [Updates: `v0.297.0`]
- `google.golang.org/genproto/googleapis/api v0.0.0-20260414002931-afd174a4e478@afd174a4e478` → [Updates: `v0.0.0-20260911204522-f61a6ca850bd`]
- `google.golang.org/genproto/googleapis/rpc v0.0.0-20260414002931-afd174a4e478@afd174a4e478` → [Updates: `v0.0.0-20260911204522-f61a6ca850bd`]
- `google.golang.org/grpc v1.82.1` → [Updates: `v1.83.1`]
- `google.golang.org/protobuf v1.36.11` → [Updates: `v1.36.12`]
- `gopkg.in/yaml.v2 v2.4.0` → [Updates: `v3.0.1`]
- `gopkg.in/yaml.v3 v3.0.1`
- `k8s.io/apimachinery v0.34.1` → [Updates: `v0.37.0`]
- `k8s.io/client-go v0.34.1` → [Updates: `v0.37.0`]
- `k8s.io/klog/v2 v2.130.1` → [Updates: `v2.140.0`]
- `k8s.io/utils v0.0.0-20250604170112-4c0f3b243397@4c0f3b243397` → [Updates: `v0.0.0-20260707023825-cf1189d6abe3`]
- `github.com/grafana/memberlist v0.3.1-0.20251126142931-6f9f62ab6f86@6f9f62ab6f86` → [Updates: `v0.3.1-0.20251126142931-6f9f62ab6f86`]

terraform (1)

versions.tf (1)

- `hashicorp/terraform >= 0.15`

---
## Need help?
You can ask for more help in the following Slack channel: #proj-renovate-self-hosted. In that channel you can also find ADR and FAQ docs in the Resources section.