Dependency Dashboard

This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.

## Abandoned Dependencies

The following dependencies have not received updates for an extended period and may be unmaintained.

View abandoned dependencies (7)

> [!NOTE]
Packages are marked as abandoned when they exceed the [`abandonmentThreshold`](https://docs.renovatebot.com/configuration-options/#abandonmentthreshold) since their last release. Unlike deprecated packages with official notices, abandonment is detected by release inactivity.
>
| Datasource | Package | Last Updated |
|------------|------|-------------|
| gomod | [github.com/cespare/xxhash/v2](https://redirect.github.com/cespare/xxhash) | `2024-04-04` |
| gomod | [github.com/go-logr/stdr](https://redirect.github.com/go-logr/stdr) | `2021-12-15` |
| gomod | [github.com/google/uuid](https://redirect.github.com/google/uuid) | `2024-01-23` |
| gomod | [github.com/inconshreveable/mousetrap](https://redirect.github.com/inconshreveable/mousetrap) | `2022-11-27` |
| gomod | [github.com/josharian/intern](https://redirect.github.com/josharian/intern) | `2019-12-14` |
| gomod | [github.com/mstoykov/atlas](https://redirect.github.com/mstoykov/atlas) | `2022-08-11` |
| gomod | [github.com/tidwall/pretty](https://redirect.github.com/tidwall/pretty) | `2022-10-01` |

## Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

- [ ] chore(deps): update grafana/xk6 action to v1.4.12

## PR Edited (Blocked)

The following updates have been manually edited so Renovate will no longer make changes. To discard all commits and start over, click on a checkbox below.

- [ ] [fix(deps): update module go.k6.io/k6 to v2](../pull/30)

## Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

- [ ] chore(deps): update dependency grafana/k6-ci to v0.5.1

## Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

- [ ] [fix(security/unknown/): update module google.golang.org/grpc to v1.83.2 [security]](../pull/55)
- [ ] [chore(deps): update go 1.26 (minor)](../pull/58)
- [ ] [fix(deps): update module github.com/sirupsen/logrus to v1.10.2](../pull/53)
- [ ] **Click on this checkbox to rebase all open PRs at once**

## PR Closed (Blocked)

The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.

- [ ] [fix(deps): update module github.com/spf13/cobra to v1.10.2](../pull/13)

## Vulnerabilities

> [!IMPORTANT]
> `2`/`2` CVEs have Renovate fixes.

gomod

go.mod

google.golang.org/grpc

- [GHSA-2v4p-qf9q-27wj](https://osv.dev/vulnerability/GHSA-2v4p-qf9q-27wj) (fixed in >= 1.83.2)
- [GO-2026-6443](https://osv.dev/vulnerability/GO-2026-6443) (fixed in >= 1.83.2)

## Detected Dependencies

devcontainer (1)

.devcontainer/devcontainer.json (8)

- `mcr.microsoft.com/devcontainers/base 2-bookworm`
- `ghcr.io/devcontainers/features/github-cli 1`
- `ghcr.io/devcontainers/features/go 1`
- `ghcr.io/szkiba/devcontainer-features/gosec 1`
- `ghcr.io/szkiba/devcontainer-features/govulncheck 1`
- `ghcr.io/szkiba/devcontainer-features/cdo 1`
- `ghcr.io/szkiba/devcontainer-features/mdcode 1`
- `ghcr.io/grafana/devcontainer-features/xk6 1`

github-actions (3)

.github/workflows/all.yml (1)

- `grafana/k6-ci v0.5.0@03469f9ae7aad25369827832c456e8f8b7b8c1c2` → [Updates: `v0.5.1`]

.github/workflows/auto-approve-renovate.yml (1)

- `grafana/k6-ci v0.5.0@03469f9ae7aad25369827832c456e8f8b7b8c1c2` → [Updates: `v0.5.1`]

.github/workflows/release.yml (2)

- `grafana/k6-ci v0.5.0@03469f9ae7aad25369827832c456e8f8b7b8c1c2` → [Updates: `v0.5.1`]
- `grafana/xk6 v1.4.6@b302a90014ee698bbf3c9f7c908b79ec8dd8053b` → [Updates: `v1.4.12`]

gomod (1)

go.mod (42)

- `go 1.25.0` → [Updates: `1.26.0`]
- `go 1.25.14` → [Updates: `1.26.8`]
- `github.com/mccutchen/go-httpbin/v2 v2.25.0`
- `github.com/sirupsen/logrus v1.9.3` → [Updates: `v1.10.2`]
- `github.com/spf13/cobra v1.4.0` → [Updates: `v1.10.2`]
- `go.k6.io/k6 v1.8.1` → [Updates: `v2.2.0`]
- `github.com/cenkalti/backoff/v5 v5.0.3` → [Updates: `v7.0.0`]
- `github.com/cespare/xxhash/v2 v2.3.0`
- `github.com/fatih/color v1.18.0` → [Updates: `v1.19.0`]
- `github.com/go-logr/logr v1.4.3` → [Updates: `v1.4.4`]
- `github.com/go-logr/stdr v1.2.2`
- `github.com/google/uuid v1.6.0`
- `github.com/grpc-ecosystem/grpc-gateway/v2 v2.28.0` → [Updates: `v2.30.0`]
- `github.com/inconshreveable/mousetrap v1.0.0` → [Updates: `v1.1.0`]
- `github.com/josharian/intern v1.0.0`
- `github.com/mailru/easyjson v0.9.0` → [Updates: `v0.9.2`]
- `github.com/mattn/go-colorable v0.1.14` → [Updates: `v0.1.15`]
- `github.com/mattn/go-isatty v0.0.20` → [Updates: `v0.0.24`]
- `github.com/mstoykov/atlas v0.0.0-20220811071828-388f114305dd@388f114305dd`
- `github.com/spf13/afero v1.1.2` → [Updates: `v1.15.0`]
- `github.com/spf13/pflag v1.0.5` → [Updates: `v1.0.10`]
- `github.com/tidwall/gjson v1.18.0` → [Updates: `v1.19.0`]
- `github.com/tidwall/match v1.1.1` → [Updates: `v1.2.0`]
- `github.com/tidwall/pretty v1.2.1`
- `go.opentelemetry.io/auto/sdk v1.2.1`
- `go.opentelemetry.io/otel v1.44.0` → [Updates: `v1.46.0`]
- `go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.43.0` → [Updates: `v1.46.0`]
- `go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.38.0` → [Updates: `v1.46.0`]
- `go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.43.0` → [Updates: `v1.46.0`]
- `go.opentelemetry.io/otel/metric v1.44.0` → [Updates: `v1.46.0`]
- `go.opentelemetry.io/otel/sdk v1.44.0` → [Updates: `v1.46.0`]
- `go.opentelemetry.io/otel/trace v1.44.0` → [Updates: `v1.46.0`]
- `go.opentelemetry.io/proto/otlp v1.10.0` → [Updates: `v1.11.0`]
- `golang.org/x/net v0.56.0` → [Updates: `v0.59.0`]
- `golang.org/x/sys v0.46.0` → [Updates: `v0.48.0`]
- `golang.org/x/text v0.39.0` → [Updates: `v0.42.0`]
- `golang.org/x/time v0.14.0` → [Updates: `v0.16.0`]
- `google.golang.org/genproto/googleapis/api v0.0.0-20260526163538-3dc84a4a5aaa@3dc84a4a5aaa` → [Updates: `v0.0.0-20260911204522-f61a6ca850bd`]
- `google.golang.org/genproto/googleapis/rpc v0.0.0-20260526163538-3dc84a4a5aaa@3dc84a4a5aaa` → [Updates: `v0.0.0-20260911204522-f61a6ca850bd`]
- `google.golang.org/grpc v1.83.1` → [Updates: `v1.83.2`]
- `google.golang.org/protobuf v1.36.11` → [Updates: `v1.36.12`]
- `gopkg.in/guregu/null.v3 v3.3.0` → [Updates: `v3.5.0`, `v6.0.0`]

regex (1)

.github/workflows/all.yml (1)

- `grafana/k6-ci v0.5.0@03469f9ae7aad25369827832c456e8f8b7b8c1c2` → [Updates: `v0.5.1`]

renovate-config (1)

renovate.json

---
## Need help?
You can ask for more help in the following Slack channel: #proj-renovate-self-hosted. In that channel you can also find ADR and FAQ docs in the Resources section.