Dependency Dashboard

This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.

## Abandoned Dependencies

The following dependencies have not received updates for an extended period and may be unmaintained.

View abandoned dependencies (12)

> [!NOTE]
Packages are marked as abandoned when they exceed the [`abandonmentThreshold`](https://docs.renovatebot.com/configuration-options/#abandonmentthreshold) since their last release. Unlike deprecated packages with official notices, abandonment is detected by release inactivity.
>
| Datasource | Package | Last Updated |
|------------|------|-------------|
| gomod | [github.com/cespare/xxhash/v2](https://redirect.github.com/cespare/xxhash) | `2024-04-04` |
| gomod | [github.com/distribution/reference](https://redirect.github.com/distribution/reference) | `2024-03-26` |
| gomod | [github.com/docker/go-units](https://redirect.github.com/docker/go-units) | `2022-05-17` |
| gomod | [github.com/go-logr/stdr](https://redirect.github.com/go-logr/stdr) | `2021-12-15` |
| gomod | [github.com/go-ole/go-ole](https://redirect.github.com/go-ole/go-ole) | `2023-08-15` |
| gomod | [github.com/go-sourcemap/sourcemap](https://redirect.github.com/go-sourcemap/sourcemap) | `2024-03-13` |
| gomod | [github.com/google/uuid](https://redirect.github.com/google/uuid) | `2024-01-23` |
| gomod | [github.com/moby/docker-image-spec](https://redirect.github.com/moby/docker-image-spec) | `2024-02-09` |
| gomod | [github.com/mstoykov/atlas](https://redirect.github.com/mstoykov/atlas) | `2022-08-11` |
| gomod | [github.com/opencontainers/go-digest](https://redirect.github.com/opencontainers/go-digest) | `2020-05-14` |
| gomod | [github.com/serenize/snaker](https://redirect.github.com/serenize/snaker) | `2020-10-27` |
| gomod | [github.com/yusufpapurcu/wmi](https://redirect.github.com/yusufpapurcu/wmi) | `2024-01-28` |

## Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

- [ ] chore(deps): update actions/setup-go action to v7

## Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

- [ ] [fix(security/unknown/): update module golang.org/x/crypto to v0.56.0 [security]](../pull/72)

## Vulnerabilities

> [!IMPORTANT]
> `2`/`3` CVEs have Renovate fixes.

gomod

go.mod

golang.org/x/crypto

- [GO-2026-5932](https://osv.dev/vulnerability/GO-2026-5932)
- [GO-2026-6354](https://osv.dev/vulnerability/GO-2026-6354) (fixed in >= 0.56.0)
- [GO-2026-6355](https://osv.dev/vulnerability/GO-2026-6355) (fixed in >= 0.56.0)

## Detected Dependencies

github-actions (3)

.github/workflows/auto-approve-renovate.yml (1)

- `grafana/k6-ci v0.5.1@41aaf8e365b56fd120b0396beae2eba3969babab`

.github/workflows/ci.yml (5)

- `actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `grafana/k6-ci v0.5.1@41aaf8e365b56fd120b0396beae2eba3969babab`
- `actions/setup-go v6@924ae3a1cded613372ab5595356fb5720e22ba16` → [Updates: `v7`]
- `grafana/setup-xk6 v1.1.1@97b842b765bd3fea56db7195e98c5f61cab8fe46`
- `go ${{ steps.go-versions.outputs.current }}`

.github/workflows/k6-ci.yml (1)

- `grafana/k6-ci v0.5.1@41aaf8e365b56fd120b0396beae2eba3969babab`

gomod (1)

go.mod (81)

- `go 1.26.0`
- `go 1.26.8`
- `github.com/grafana/xk6-sql v1.2.2`
- `github.com/lib/pq v1.12.3`
- `github.com/stretchr/testify v1.12.1`
- `github.com/testcontainers/testcontainers-go v0.44.0`
- `github.com/testcontainers/testcontainers-go/modules/postgres v0.44.0`
- `dario.cat/mergo v1.0.2`
- `github.com/Azure/go-ansiterm v0.0.0-20250102033503-faa5f7b0171c@faa5f7b0171c` → [Updates: `v0.0.0-20260914234754-15785f84ba1c`]
- `github.com/Microsoft/go-winio v0.6.2`
- `github.com/cenkalti/backoff/v4 v4.3.0` → [Updates: `v7.0.0`]
- `github.com/cenkalti/backoff/v5 v5.0.3` → [Updates: `v7.0.0`]
- `github.com/cespare/xxhash/v2 v2.3.0`
- `github.com/containerd/errdefs v1.0.0`
- `github.com/containerd/errdefs/pkg v0.3.0`
- `github.com/containerd/log v0.1.0` → [Updates: `v0.2.0`]
- `github.com/containerd/platforms v0.2.1`
- `github.com/cpuguy83/dockercfg v0.3.2`
- `github.com/distribution/reference v0.6.0`
- `github.com/dlclark/regexp2 v1.12.0` → [Updates: `v2.8.0`]
- `github.com/docker/go-connections v0.7.0` → [Updates: `v0.8.1`]
- `github.com/docker/go-units v0.5.0`
- `github.com/ebitengine/purego v0.10.1` → [Updates: `v0.11.0`]
- `github.com/evanw/esbuild v0.28.0` → [Updates: `v0.28.2`]
- `github.com/fatih/color v1.19.0`
- `github.com/felixge/httpsnoop v1.1.0`
- `github.com/go-logr/logr v1.4.3` → [Updates: `v1.4.4`]
- `github.com/go-logr/stdr v1.2.2`
- `github.com/go-ole/go-ole v1.3.0`
- `github.com/go-sourcemap/sourcemap v2.1.4+incompatible`
- `github.com/google/pprof v0.0.0-20260115054156-294ebfa9ad83@294ebfa9ad83` → [Updates: `v0.0.0-20260906184651-6331bc6350fe`]
- `github.com/google/uuid v1.6.0`
- `github.com/grafana/sobek v0.0.0-20260429085637-a66d4790012b@a66d4790012b` → [Updates: `v0.0.0-20260429085637-a66d4790012b`]
- `github.com/grpc-ecosystem/grpc-gateway/v2 v2.28.0` → [Updates: `v2.30.0`]
- `github.com/klauspost/compress v1.18.7` → [Updates: `v1.20.0`]
- `github.com/lufia/plan9stats v0.0.0-20260330125221-c963978e514e@c963978e514e` → [Updates: `v0.0.0-20260802145828-341c2f0c90b5`]
- `github.com/magiconair/properties v1.8.10` → [Updates: `v1.18.11`]
- `github.com/mattn/go-colorable v0.1.14` → [Updates: `v0.1.15`]
- `github.com/mattn/go-isatty v0.0.22` → [Updates: `v0.0.24`]
- `github.com/moby/docker-image-spec v1.3.1`
- `github.com/moby/go-archive v0.3.0` → [Updates: `v0.3.3`]
- `github.com/moby/moby/api v1.55.0` → [Updates: `v1.56.0`]
- `github.com/moby/moby/client v0.5.0` → [Updates: `v0.6.0`]
- `github.com/moby/patternmatcher v0.6.1`
- `github.com/moby/sys/sequential v0.7.0`
- `github.com/moby/sys/user v0.4.1`
- `github.com/moby/sys/userns v0.1.0` → [Updates: `v0.2.1`]
- `github.com/moby/term v0.5.2`
- `github.com/mstoykov/atlas v0.0.0-20220811071828-388f114305dd@388f114305dd`
- `github.com/opencontainers/go-digest v1.0.0`
- `github.com/opencontainers/image-spec v1.1.1`
- `github.com/power-devops/perfstat v0.0.0-20240221224432-82ca36839d55@82ca36839d55` → [Updates: `v0.0.0-20260916203055-22a1a467d9f0`]
- `github.com/serenize/snaker v0.0.0-20201027110005-a7ad2135616e@a7ad2135616e`
- `github.com/shirou/gopsutil/v4 v4.26.6` → [Updates: `v4.26.8`]
- `github.com/sirupsen/logrus v1.9.4` → [Updates: `v1.10.2`]
- `github.com/spf13/afero v1.11.0` → [Updates: `v1.15.0`]
- `github.com/tklauser/go-sysconf v0.4.0`
- `github.com/tklauser/numcpus v0.12.0`
- `github.com/yusufpapurcu/wmi v1.2.4`
- `go.k6.io/k6/v2 v2.0.0` → [Updates: `v2.2.0`]
- `go.opentelemetry.io/auto/sdk v1.2.1`
- `go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.69.0` → [Updates: `v0.71.0`]
- `go.opentelemetry.io/otel v1.44.0` → [Updates: `v1.46.0`]
- `go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.43.0` → [Updates: `v1.46.0`]
- `go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.43.0` → [Updates: `v1.46.0`]
- `go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.43.0` → [Updates: `v1.46.0`]
- `go.opentelemetry.io/otel/metric v1.44.0` → [Updates: `v1.46.0`]
- `go.opentelemetry.io/otel/sdk v1.44.0` → [Updates: `v1.46.0`]
- `go.opentelemetry.io/otel/trace v1.44.0` → [Updates: `v1.46.0`]
- `go.opentelemetry.io/proto/otlp v1.10.0` → [Updates: `v1.11.0`]
- `go.yaml.in/yaml/v3 v3.0.5`
- `golang.org/x/crypto v0.55.0` → [Updates: `v0.56.0`]
- `golang.org/x/net v0.58.0` → [Updates: `v0.59.0`]
- `golang.org/x/sys v0.47.0` → [Updates: `v0.48.0`]
- `golang.org/x/text v0.41.0` → [Updates: `v0.42.0`]
- `golang.org/x/time v0.15.0` → [Updates: `v0.16.0`]
- `google.golang.org/genproto/googleapis/api v0.0.0-20260526163538-3dc84a4a5aaa@3dc84a4a5aaa` → [Updates: `v0.0.0-20260911204522-f61a6ca850bd`]
- `google.golang.org/genproto/googleapis/rpc v0.0.0-20260526163538-3dc84a4a5aaa@3dc84a4a5aaa` → [Updates: `v0.0.0-20260911204522-f61a6ca850bd`]
- `google.golang.org/grpc v1.83.2`
- `google.golang.org/protobuf v1.36.11` → [Updates: `v1.36.12`]
- `gopkg.in/guregu/null.v3 v3.5.0` → [Updates: `v6.0.0`]

regex (1)

.github/workflows/k6-ci.yml (1)

- `grafana/k6-ci v0.5.1@41aaf8e365b56fd120b0396beae2eba3969babab`

renovate-config (1)

renovate.json

---
## Need help?
You can ask for more help in the following Slack channel: #proj-renovate-self-hosted. In that channel you can also find ADR and FAQ docs in the Resources section.