Dependency Dashboard

This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.

## Abandoned Dependencies

The following dependencies have not received updates for an extended period and may be unmaintained.

View abandoned dependencies (2)

> [!NOTE]
Packages are marked as abandoned when they exceed the [`abandonmentThreshold`](https://docs.renovatebot.com/configuration-options/#abandonmentthreshold) since their last release. Unlike deprecated packages with official notices, abandonment is detected by release inactivity.
>
| Datasource | Package | Last Updated |
|------------|------|-------------|
| gomod | [github.com/beorn7/perks](https://redirect.github.com/beorn7/perks) | `2019-07-31` |
| gomod | [github.com/cespare/xxhash/v2](https://redirect.github.com/cespare/xxhash) | `2024-04-04` |

## Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

- [ ] chore(deps): update module github.com/prometheus/common to v0.71.0
- [ ] chore(deps): update module github.com/prometheus/procfs to v0.22.0
- [ ] chore(deps): update module google.golang.org/protobuf to v1.36.12
- [ ] fix(deps): update module github.com/prometheus/client_golang to v1.24.1
- [ ] 🔐 **Create all rate-limited PRs at once** 🔐

## Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

- [ ] [fix(security/unknown/): update module golang.org/x/sys to v0.44.0 [security]](../pull/22)
- [ ] [chore(deps): pin dependencies](../pull/13) (`golang`, `grafana/grafana`, `prom/alertmanager`, `prom/node-exporter`, `prom/prometheus`)
- [ ] [chore(deps): update grafana/grafana docker tag to v10.4.19-security-01](../pull/14)
- [ ] [chore(deps): update golang docker tag to v1.24](../pull/15)
- [ ] [chore(deps): update module github.com/cespare/xxhash/v2 to v2.3.0](../pull/24)
- [ ] [chore(deps): update module github.com/prometheus/client_model to v0.6.3](../pull/25)
- [ ] [chore(deps): update prom/alertmanager docker tag to v0.34.0](../pull/16)
- [ ] [chore(deps): update prom/node-exporter docker tag to v1.12.1](../pull/17)
- [ ] [chore(deps): update prom/prometheus docker tag to v2.55.1](../pull/18)
- [ ] [chore(deps): update grafana/grafana docker tag to v13](../pull/20)
- [ ] [chore(deps): update prom/prometheus docker tag to v3](../pull/21)
- [ ] **Click on this checkbox to rebase all open PRs at once**

## Vulnerabilities

> [!IMPORTANT]
> `1`/`1` CVEs have Renovate fixes.

gomod

go.mod

golang.org/x/sys

- [GO-2026-5024](https://osv.dev/vulnerability/GO-2026-5024) (fixed in >= 0.44.0)

## Detected Dependencies

docker-compose (1)

docker-compose.yaml (4)

- `prom/prometheus v2.45.3` → [Updates: `v2.55.1`, `v3.14.0`, `v2.45.3`]
- `prom/node-exporter v1.7.0` → [Updates: `v1.12.1`, `v1.7.0`]
- `prom/alertmanager v0.27.0` → [Updates: `v0.34.0`, `v0.27.0`]
- `grafana/grafana 10.4.0` → [Updates: `10.4.19-security-01`, `13.2.1`, `10.4.0`]

dockerfile (1)

Dockerfile (1)

- `golang 1.21-bullseye` → [Updates: `1.24-bullseye`, `1.21-bullseye`]

gomod (1)

go.mod (9)

- `go 1.21.6`
- `github.com/prometheus/client_golang v1.19.0` → [Updates: `v1.24.1`]
- `github.com/beorn7/perks v1.0.1`
- `github.com/cespare/xxhash/v2 v2.2.0` → [Updates: `v2.3.0`]
- `github.com/prometheus/client_model v0.5.0` → [Updates: `v0.6.3`]
- `github.com/prometheus/common v0.48.0` → [Updates: `v0.71.0`]
- `github.com/prometheus/procfs v0.12.0` → [Updates: `v0.22.0`]
- `golang.org/x/sys v0.16.0` → [Updates: `v0.44.0`]
- `google.golang.org/protobuf v1.33.0` → [Updates: `v1.36.12`]

---
## Need help?
You can ask for more help in the following Slack channel: #proj-renovate-self-hosted. In that channel you can also find ADR and FAQ docs in the Resources section.