Dependency Dashboard

This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.

## Abandoned Dependencies

The following dependencies have not received updates for an extended period and may be unmaintained.

View abandoned dependencies (9)

> [!NOTE]
Packages are marked as abandoned when they exceed the [`abandonmentThreshold`](https://docs.renovatebot.com/configuration-options/#abandonmentthreshold) since their last release. Unlike deprecated packages with official notices, abandonment is detected by release inactivity.
>
| Datasource | Package | Last Updated |
|------------|------|-------------|
| gomod | [github.com/cespare/xxhash/v2](https://redirect.github.com/cespare/xxhash) | `2024-04-04` |
| gomod | [github.com/go-logr/stdr](https://redirect.github.com/go-logr/stdr) | `2021-12-15` |
| gomod | [github.com/go-sourcemap/sourcemap](https://redirect.github.com/go-sourcemap/sourcemap) | `2024-03-13` |
| gomod | [github.com/google/uuid](https://redirect.github.com/google/uuid) | `2024-01-23` |
| gomod | [github.com/mstoykov/atlas](https://redirect.github.com/mstoykov/atlas) | `2022-08-11` |
| gomod | [github.com/proullon/ramsql](https://redirect.github.com/proullon/ramsql) | `2024-07-24` |
| gomod | [github.com/serenize/snaker](https://redirect.github.com/serenize/snaker) | `2020-10-27` |
| gomod | [gopkg.in/tomb.v1](https://redirect.github.com/go-tomb/tomb) | `2014-10-24` |
| npm | [k6](https://redirect.github.com/loadimpact/k6) | `2017-06-13` |

## Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

- [ ] chore(deps): update grafana/xk6 action to v1.4.12
- [ ] chore(deps): lock file maintenance
- [ ] 🔐 **Create all awaiting schedule PRs at once** 🔐

## Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

- [ ] fix(deps): update github.com/grafana/sobek digest to 8a431c4
- [ ] chore(deps): update dependency @types/k6 to v2.2.1
- [ ] chore(deps): update dependency grafana/k6-ci to v0.5.1
- [ ] chore(deps): update mcr.microsoft.com/devcontainers/base docker tag to v2

## Vulnerabilities

Renovate has not found any CVEs on [osv.dev](https://osv.dev).

## Detected Dependencies

devcontainer (1)

.devcontainer/devcontainer.json (11)

- `mcr.microsoft.com/devcontainers/base 1-bookworm` → [Updates: `2-bookworm`]
- `ghcr.io/devcontainers/features/github-cli 1`
- `ghcr.io/devcontainers/features/go 1`
- `ghcr.io/guiyomh/features/goreleaser 0`
- `ghcr.io/michidk/devcontainers-features/bun 1`
- `ghcr.io/szkiba/devcontainer-features/gosec 1`
- `ghcr.io/szkiba/devcontainer-features/govulncheck 1`
- `ghcr.io/szkiba/devcontainer-features/cdo 1`
- `ghcr.io/szkiba/devcontainer-features/mdcode 1`
- `ghcr.io/szkiba/devcontainer-features/bats 1`
- `ghcr.io/grafana/devcontainer-features/xk6 1`

github-actions (3)

.github/workflows/all.yml (1)

- `grafana/k6-ci v0.5.0@03469f9ae7aad25369827832c456e8f8b7b8c1c2` → [Updates: `v0.5.1`]

.github/workflows/auto-approve-renovate.yml (1)

- `grafana/k6-ci v0.5.0@03469f9ae7aad25369827832c456e8f8b7b8c1c2` → [Updates: `v0.5.1`]

.github/workflows/release.yml (2)

- `grafana/k6-ci v0.5.0@03469f9ae7aad25369827832c456e8f8b7b8c1c2` → [Updates: `v0.5.1`]
- `grafana/xk6 v1.4.6@b302a90014ee698bbf3c9f7c908b79ec8dd8053b` → [Updates: `v1.4.12`]

gomod (1)

go.mod (47)

- `go 1.26.0`
- `go 1.26.8`
- `github.com/grafana/sobek v0.0.0-20260727154728-7781506a890f@7781506a890f` → [Updates: `v0.0.0-20260727154728-7781506a890f`]
- `github.com/proullon/ramsql v0.1.4`
- `github.com/stretchr/testify v1.12.1`
- `go.k6.io/k6/v2 v2.2.0`
- `github.com/cenkalti/backoff/v5 v5.0.3` → [Updates: `v7.0.0`]
- `github.com/cespare/xxhash/v2 v2.3.0`
- `github.com/dlclark/regexp2/v2 v2.5.2` → [Updates: `v2.8.0`]
- `github.com/evanw/esbuild v0.28.1` → [Updates: `v0.28.2`]
- `github.com/fatih/color v1.19.0`
- `github.com/fsnotify/fsnotify v1.6.0` → [Updates: `v1.10.1`]
- `github.com/go-logr/logr v1.4.3` → [Updates: `v1.4.4`]
- `github.com/go-logr/stdr v1.2.2`
- `github.com/go-sourcemap/sourcemap v2.1.4+incompatible`
- `github.com/google/pprof v0.0.0-20260115054156-294ebfa9ad83@294ebfa9ad83` → [Updates: `v0.0.0-20260906184651-6331bc6350fe`]
- `github.com/google/uuid v1.6.0`
- `github.com/grafana/sobek-webapi-encoding v0.1.0`
- `github.com/grpc-ecosystem/grpc-gateway/v2 v2.29.0` → [Updates: `v2.30.0`]
- `github.com/jackc/pgx/v5 v5.9.2` → [Updates: `v5.11.0`]
- `github.com/mattn/go-colorable v0.1.15`
- `github.com/mattn/go-isatty v0.0.24`
- `github.com/mstoykov/atlas v0.0.0-20220811071828-388f114305dd@388f114305dd`
- `github.com/serenize/snaker v0.0.0-20201027110005-a7ad2135616e@a7ad2135616e`
- `github.com/sirupsen/logrus v1.9.3` → [Updates: `v1.10.2`]
- `github.com/spf13/afero v1.11.0` → [Updates: `v1.15.0`]
- `go.opentelemetry.io/auto/sdk v1.2.1`
- `go.opentelemetry.io/otel v1.44.0` → [Updates: `v1.46.0`]
- `go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.44.0` → [Updates: `v1.46.0`]
- `go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.44.0` → [Updates: `v1.46.0`]
- `go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.44.0` → [Updates: `v1.46.0`]
- `go.opentelemetry.io/otel/metric v1.44.0` → [Updates: `v1.46.0`]
- `go.opentelemetry.io/otel/sdk v1.44.0` → [Updates: `v1.46.0`]
- `go.opentelemetry.io/otel/trace v1.44.0` → [Updates: `v1.46.0`]
- `go.opentelemetry.io/proto/otlp v1.11.0`
- `go.yaml.in/yaml/v3 v3.0.5`
- `golang.org/x/exp v0.0.0-20230713183714-613f0c0eb8a1@613f0c0eb8a1` → [Updates: `v0.0.0-20260908205506-85c1c2202aba`]
- `golang.org/x/net v0.58.0` → [Updates: `v0.59.0`]
- `golang.org/x/sys v0.47.0` → [Updates: `v0.48.0`]
- `golang.org/x/text v0.41.0` → [Updates: `v0.42.0`]
- `golang.org/x/time v0.15.0` → [Updates: `v0.16.0`]
- `google.golang.org/genproto/googleapis/api v0.0.0-20260720211330-0afa2a65878a@0afa2a65878a` → [Updates: `v0.0.0-20260911204522-f61a6ca850bd`]
- `google.golang.org/genproto/googleapis/rpc v0.0.0-20260720211330-0afa2a65878a@0afa2a65878a` → [Updates: `v0.0.0-20260911204522-f61a6ca850bd`]
- `google.golang.org/grpc v1.83.2`
- `google.golang.org/protobuf v1.36.11` → [Updates: `v1.36.12`]
- `gopkg.in/guregu/null.v3 v3.5.0` → [Updates: `v6.0.0`]
- `gopkg.in/tomb.v1 v1.0.0-20141024135613-dd632973f1e7@dd632973f1e7`

npm (1)

package.json (3)

- `@types/k6 2.2.0` → [Updates: `2.2.1`]
- `k6 0.0.0`
- `npm 12.0.2`

regex (1)

.github/workflows/all.yml (1)

- `grafana/k6-ci v0.5.0@03469f9ae7aad25369827832c456e8f8b7b8c1c2` → [Updates: `v0.5.1`]

renovate-config (1)

renovate.json

---
## Need help?
You can ask for more help in the following Slack channel: #proj-renovate-self-hosted. In that channel you can also find ADR and FAQ docs in the Resources section.

Start with the Dependency Dashboard and the Renovate documentation linked in the issue, then inspect .devcontainer/devcontainer.json, .github/workflows/*.yml, go.mod, package.json, and renovate.json. The issue lists many possible dependency updates but does not select a change or define acceptance criteria; done would require choosing a specific update set and validating it.

Written by the indexing model from the issue text.