Dependency Dashboard

This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.

## Abandoned Dependencies

The following dependencies have not received updates for an extended period and may be unmaintained.

View abandoned dependencies (9)

> [!NOTE]
Packages are marked as abandoned when they exceed the [`abandonmentThreshold`](https://docs.renovatebot.com/configuration-options/#abandonmentthreshold) since their last release. Unlike deprecated packages with official notices, abandonment is detected by release inactivity.
>
| Datasource | Package | Last Updated |
|------------|------|-------------|
| gomod | [github.com/cespare/xxhash/v2](https://redirect.github.com/cespare/xxhash) | `2024-04-04` |
| gomod | [github.com/go-logr/stdr](https://redirect.github.com/go-logr/stdr) | `2021-12-15` |
| gomod | [github.com/go-sourcemap/sourcemap](https://redirect.github.com/go-sourcemap/sourcemap) | `2024-03-13` |
| gomod | [github.com/golang-sql/civil](https://redirect.github.com/golang-sql/civil) | `2022-02-23` |
| gomod | [github.com/golang-sql/sqlexp](https://redirect.github.com/golang-sql/sqlexp) | `2022-05-18` |
| gomod | [github.com/google/uuid](https://redirect.github.com/google/uuid) | `2024-01-23` |
| gomod | [github.com/mstoykov/atlas](https://redirect.github.com/mstoykov/atlas) | `2022-08-11` |
| gomod | [github.com/serenize/snaker](https://redirect.github.com/serenize/snaker) | `2020-10-27` |
| gomod | [github.com/shopspring/decimal](https://redirect.github.com/shopspring/decimal) | `2024-04-12` |

## Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

- [ ] chore(deps): update dependency grafana/k6-ci to v0.5.1

## Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

- [ ] [chore(deps): update go module directive to v1.26.0](../pull/68)

## PR Closed (Blocked)

The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.

- [ ] [fix(security/unknown/): update module golang.org/x/crypto to v0.56.0 [security]](../pull/64)

## Vulnerabilities

> [!IMPORTANT]
> `2`/`3` CVEs have Renovate fixes.

gomod

go.mod

golang.org/x/crypto

- [GO-2026-5932](https://osv.dev/vulnerability/GO-2026-5932)
- [GO-2026-6354](https://osv.dev/vulnerability/GO-2026-6354) (fixed in >= 0.56.0)
- [GO-2026-6355](https://osv.dev/vulnerability/GO-2026-6355) (fixed in >= 0.56.0)

## Detected Dependencies

github-actions (2)

.github/workflows/auto-approve-renovate.yml (1)

- `grafana/k6-ci v0.5.0@03469f9ae7aad25369827832c456e8f8b7b8c1c2` → [Updates: `v0.5.1`]

.github/workflows/ci.yml (1)

- `grafana/k6-ci v0.5.0@03469f9ae7aad25369827832c456e8f8b7b8c1c2` → [Updates: `v0.5.1`]

gomod (1)

go.mod (45)

- `go 1.25.7` → [Updates: `1.26.0`]
- `go 1.26.8`
- `github.com/grafana/xk6-sql v1.2.2`
- `github.com/microsoft/go-mssqldb v1.11.0`
- `github.com/cenkalti/backoff/v5 v5.0.3` → [Updates: `v7.0.0`]
- `github.com/cespare/xxhash/v2 v2.3.0`
- `github.com/dlclark/regexp2 v1.12.0` → [Updates: `v2.8.0`]
- `github.com/evanw/esbuild v0.28.0` → [Updates: `v0.28.2`]
- `github.com/fatih/color v1.19.0`
- `github.com/go-logr/logr v1.4.3` → [Updates: `v1.4.4`]
- `github.com/go-logr/stdr v1.2.2`
- `github.com/go-sourcemap/sourcemap v2.1.4+incompatible`
- `github.com/golang-sql/civil v0.0.0-20220223132316-b832511892a9@b832511892a9`
- `github.com/golang-sql/sqlexp v0.1.0`
- `github.com/google/pprof v0.0.0-20260115054156-294ebfa9ad83@294ebfa9ad83` → [Updates: `v0.0.0-20260906184651-6331bc6350fe`]
- `github.com/google/uuid v1.6.0`
- `github.com/grafana/sobek v0.0.0-20260429085637-a66d4790012b@a66d4790012b` → [Updates: `v0.0.0-20260429085637-a66d4790012b`]
- `github.com/grpc-ecosystem/grpc-gateway/v2 v2.28.0` → [Updates: `v2.30.0`]
- `github.com/mattn/go-colorable v0.1.14` → [Updates: `v0.1.15`]
- `github.com/mattn/go-isatty v0.0.22` → [Updates: `v0.0.24`]
- `github.com/mstoykov/atlas v0.0.0-20220811071828-388f114305dd@388f114305dd`
- `github.com/serenize/snaker v0.0.0-20201027110005-a7ad2135616e@a7ad2135616e`
- `github.com/shopspring/decimal v1.4.0`
- `github.com/sirupsen/logrus v1.9.3` → [Updates: `v1.10.2`]
- `github.com/spf13/afero v1.11.0` → [Updates: `v1.15.0`]
- `go.k6.io/k6/v2 v2.0.0` → [Updates: `v2.2.0`]
- `go.opentelemetry.io/auto/sdk v1.2.1`
- `go.opentelemetry.io/otel v1.44.0` → [Updates: `v1.46.0`]
- `go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.43.0` → [Updates: `v1.46.0`]
- `go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.43.0` → [Updates: `v1.46.0`]
- `go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.43.0` → [Updates: `v1.46.0`]
- `go.opentelemetry.io/otel/metric v1.44.0` → [Updates: `v1.46.0`]
- `go.opentelemetry.io/otel/sdk v1.44.0` → [Updates: `v1.46.0`]
- `go.opentelemetry.io/otel/trace v1.44.0` → [Updates: `v1.46.0`]
- `go.opentelemetry.io/proto/otlp v1.10.0` → [Updates: `v1.11.0`]
- `golang.org/x/crypto v0.55.0` → [Updates: `v0.56.0`]
- `golang.org/x/net v0.58.0` → [Updates: `v0.59.0`]
- `golang.org/x/sys v0.47.0` → [Updates: `v0.48.0`]
- `golang.org/x/text v0.41.0` → [Updates: `v0.42.0`]
- `golang.org/x/time v0.15.0` → [Updates: `v0.16.0`]
- `google.golang.org/genproto/googleapis/api v0.0.0-20260526163538-3dc84a4a5aaa@3dc84a4a5aaa` → [Updates: `v0.0.0-20260911204522-f61a6ca850bd`]
- `google.golang.org/genproto/googleapis/rpc v0.0.0-20260526163538-3dc84a4a5aaa@3dc84a4a5aaa` → [Updates: `v0.0.0-20260911204522-f61a6ca850bd`]
- `google.golang.org/grpc v1.83.2`
- `google.golang.org/protobuf v1.36.11` → [Updates: `v1.36.12`]
- `gopkg.in/guregu/null.v3 v3.5.0` → [Updates: `v6.0.0`]

regex (1)

.github/workflows/ci.yml (1)

- `grafana/k6-ci v0.5.0@03469f9ae7aad25369827832c456e8f8b7b8c1c2` → [Updates: `v0.5.1`]

renovate-config (1)

renovate.json

---
## Need help?
You can ask for more help in the following Slack channel: #proj-renovate-self-hosted. In that channel you can also find ADR and FAQ docs in the Resources section.