Dependency Dashboard

This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.
[View this repository on the Mend.io Web Portal](https://developer.mend.io/github/linode/linode-blockstorage-csi-driver).

## Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

- [ ] Update alpine Docker tag to v3.24.2
- [ ] Update CSI sidecar images (`registry.k8s.io/sig-storage/csi-attacher`, `registry.k8s.io/sig-storage/csi-node-driver-registrar`, `registry.k8s.io/sig-storage/csi-provisioner`, `registry.k8s.io/sig-storage/csi-resizer`)
- [ ] Update dependency go to v1.27.1
- [ ] Update github actions ci (`codecov/codecov-action`, `dorny/paths-filter`)
- [ ] Update golang Docker tag to v1.27
- [ ] Update kubernetes (`k8s.io/api`, `k8s.io/apimachinery`, `k8s.io/client-go`, `k8s.io/mount-utils`, `k8s.io/utils`)
- [ ] Update linode sdks (`github.com/linode/go-metadata`, `github.com/linode/linodego/v2`)
- [ ] Update mise tools (`clusterctl`, `ctlptl`, `ginkgo`, `go:github.com/kubernetes-csi/csi-test/v5/cmd/csi-sanity`, `go:golang.org/x/vuln/cmd/govulncheck`, `golangci-lint`, `kind`, `kubectl`, `yq`)
- [ ] Update module github.com/container-storage-interface/spec to v1.13.0
- [ ] Update module github.com/jaypipes/ghw to v0.25.0
- [ ] Update module github.com/prometheus/client_golang to v1.24.1
- [ ] Update module github.com/stretchr/testify to v1.12.1
- [ ] Update module golang.org/x/sys to v0.48.0
- [ ] Update module google.golang.org/grpc to v1.84.0
- [ ] Update otel (`go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc`, `go.opentelemetry.io/otel`, `go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp`, `go.opentelemetry.io/otel/sdk`, `go.opentelemetry.io/otel/trace`)
- [ ] Update step-security/harden-runner action to v2.21.1
- [ ] Update GitHub Actions (`actions/setup-python`, `azure/setup-helm`, `docker/build-push-action`, `docker/metadata-action`, `jdx/mise-action`, `release-drafter/release-drafter`, `reviewdog/action-actionlint`, `softprops/action-gh-release`)
- [ ] 🔐 **Create all awaiting schedule PRs at once** 🔐

## Detected Dependencies

dockerfile (2)

Dockerfile (2)

- `golang 1.26-alpine` → [Updates: `1.27-alpine`]
- `alpine 3.23.3` → [Updates: `3.24.2`]

Dockerfile.dev (1)

- `golang 1.26-alpine` → [Updates: `1.27-alpine`]

github-actions (9)

.github/workflows/actionlint.yml (3)

- `step-security/harden-runner v2.21.0@05e31511f85b41b11d1cf0ef85d0992719546e2c` → [Updates: `v2.21.1`]
- `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `reviewdog/action-actionlint v1.73.2@dbe5299849118fd6f099ba563d263d770955a64a` → [Updates: `v1.76.0`]

.github/workflows/automerge.yml (2)

- `step-security/harden-runner v2.19.0@8d3c67de8e2fe68ef647c8db1e6a09f647780f40` → [Updates: `v2.21.1`]
- `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1`

.github/workflows/ci.yml (11)

- `step-security/harden-runner v2.19.0@8d3c67de8e2fe68ef647c8db1e6a09f647780f40` → [Updates: `v2.21.1`]
- `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `dorny/paths-filter v4.0.1@fbd0ab8f3e69293af611ebaee6363fc25e6d187d` → [Updates: `v4.0.3`]
- `step-security/harden-runner v2.19.0@8d3c67de8e2fe68ef647c8db1e6a09f647780f40` → [Updates: `v2.21.1`]
- `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `jdx/mise-action v4.2.0@e6a8b3978addb5a52f2b4cd9d91eafa7f0ab959d` → [Updates: `v4.3.0`]
- `codecov/codecov-action v7.0.0@fb8b3582c8e4def4969c97caa2f19720cb33a72f` → [Updates: `v7.1.1`]
- `step-security/harden-runner v2.19.0@8d3c67de8e2fe68ef647c8db1e6a09f647780f40` → [Updates: `v2.21.1`]
- `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `docker/login-action v4.6.0@dbcb813823bdd20940b903addbd779551569679f`
- `jdx/mise-action v4.2.0@e6a8b3978addb5a52f2b4cd9d91eafa7f0ab959d` → [Updates: `v4.3.0`]

.github/workflows/go-analyze.yml (6)

- `step-security/harden-runner v2.19.1@a5ad31d6a139d249332a2605b85202e8c0b78450` → [Updates: `v2.21.1`]
- `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `dorny/paths-filter v4.0.1@fbd0ab8f3e69293af611ebaee6363fc25e6d187d` → [Updates: `v4.0.3`]
- `step-security/harden-runner v2.19.1@a5ad31d6a139d249332a2605b85202e8c0b78450` → [Updates: `v2.21.1`]
- `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `jdx/mise-action v4.1.0@dba19683ed58901619b14f395a24841710cb4925` → [Updates: `v4.3.0`]

.github/workflows/helm.yml (10)

- `step-security/harden-runner v2.19.0@8d3c67de8e2fe68ef647c8db1e6a09f647780f40` → [Updates: `v2.21.1`]
- `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `azure/setup-helm v5.0.0@dda3372f752e03dde6b3237bc9431cdc2f7a02a2` → [Updates: `v5.0.1`]
- `actions/setup-python v6.2.0@a309ff8b426b58ec0e2a45f0f869d46889d02405` → [Updates: `v7.0.0`]
- `helm/chart-testing-action v2.8.0@6ec842c01de15ebb84c8627d2744a0c2f2755c9f`
- `step-security/harden-runner v2.19.0@8d3c67de8e2fe68ef647c8db1e6a09f647780f40` → [Updates: `v2.21.1`]
- `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `azure/setup-helm v5.0.0@dda3372f752e03dde6b3237bc9431cdc2f7a02a2` → [Updates: `v5.0.1`]
- `helm/chart-releaser-action v1.7.0@cae68fefc6b5f367a0275617c9f83181ba54714f`
- `python 3.14`

.github/workflows/label-sync.yml (3)

- `step-security/harden-runner v2.19.0@8d3c67de8e2fe68ef647c8db1e6a09f647780f40` → [Updates: `v2.21.1`]
- `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `micnncim/action-label-syncer v1.3.0@3abd5ab72fda571e69fffd97bd4e0033dd5f495c`

.github/workflows/pr-labeler.yml (2)

- `step-security/harden-runner v2.19.0@8d3c67de8e2fe68ef647c8db1e6a09f647780f40` → [Updates: `v2.21.1`]
- `release-drafter/release-drafter v7.2.0@5de93583980a40bd78603b6dfdcda5b4df377b32` → [Updates: `v7.7.0`]

.github/workflows/release-drafter.yml (2)

- `step-security/harden-runner v2.19.0@8d3c67de8e2fe68ef647c8db1e6a09f647780f40` → [Updates: `v2.21.1`]
- `release-drafter/release-drafter v7.2.0@5de93583980a40bd78603b6dfdcda5b4df377b32` → [Updates: `v7.7.0`]

.github/workflows/release.yml (8)

- `step-security/harden-runner v2.19.0@8d3c67de8e2fe68ef647c8db1e6a09f647780f40` → [Updates: `v2.21.1`]
- `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `jdx/mise-action v4.2.0@e6a8b3978addb5a52f2b4cd9d91eafa7f0ab959d` → [Updates: `v4.3.0`]
- `softprops/action-gh-release v3.0.0@b4309332981a82ec1c5618f44dd2e27cc8bfbfda` → [Updates: `v3.0.3`]
- `docker/metadata-action v6.0.0@030e881283bb7a6894de51c315a6bfe6a94e05cf` → [Updates: `v6.2.0`]
- `docker/login-action v4.6.0@dbcb813823bdd20940b903addbd779551569679f`
- `docker/login-action v4.6.0@dbcb813823bdd20940b903addbd779551569679f`
- `docker/build-push-action v7.1.0@bcafcacb16a39f128d818304e6c9c0c18556b85f` → [Updates: `v7.4.0`]

gomod (1)

go.mod (29)

- `go 1.26.0`
- `go 1.26.7` → [Updates: `1.27.1`]
- `github.com/container-storage-interface/spec v1.12.0` → [Updates: `v1.13.0`]
- `github.com/go-logr/logr v1.4.4`
- `github.com/golang/mock v1.6.0`
- `github.com/google/uuid v1.6.0`
- `github.com/ianschenck/envflag v0.0.0-20140720210342-9111d830d133@9111d830d133`
- `github.com/jaypipes/ghw v0.23.0` → [Updates: `v0.25.0`]
- `github.com/linode/go-metadata v0.2.4` → [Updates: `v0.3.1`]
- `github.com/linode/linodego/v2 v2.4.0` → [Updates: `v2.7.0`]
- `github.com/martinjungblut/go-cryptsetup v0.0.0-20220520180014-fd0874fd07a6@fd0874fd07a6`
- `github.com/prometheus/client_golang v1.23.2` → [Updates: `v1.24.1`]
- `github.com/stretchr/testify v1.11.1` → [Updates: `v1.12.1`]
- `go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.70.0` → [Updates: `v0.71.0`]
- `go.opentelemetry.io/otel v1.45.0` → [Updates: `v1.46.0`]
- `go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.45.0` → [Updates: `v1.46.0`]
- `go.opentelemetry.io/otel/sdk v1.45.0` → [Updates: `v1.46.0`]
- `go.opentelemetry.io/otel/trace v1.45.0` → [Updates: `v1.46.0`]
- `go.uber.org/automaxprocs v1.6.0`
- `go.uber.org/mock v0.6.0`
- `golang.org/x/sys v0.47.0` → [Updates: `v0.48.0`]
- `google.golang.org/grpc v1.83.2` → [Updates: `v1.84.0`]
- `google.golang.org/protobuf v1.36.12`
- `k8s.io/api v0.35.3` → [Updates: `v0.37.0`]
- `k8s.io/apimachinery v0.35.3` → [Updates: `v0.37.0`]
- `k8s.io/client-go v0.35.3` → [Updates: `v0.37.0`]
- `k8s.io/klog/v2 v2.140.0`
- `k8s.io/mount-utils v0.35.3` → [Updates: `v0.37.0`]
- `k8s.io/utils v0.0.0-20260319190234-28399d86e0b5@28399d86e0b5` → [Updates: `v0.0.0-20260707023825-cf1189d6abe3`]

helm-values (1)

helm-chart/csi-driver/values.yaml (4)

- `registry.k8s.io/sig-storage/csi-provisioner v6.2.0` → [Updates: `v6.3.0`]
- `registry.k8s.io/sig-storage/csi-attacher v4.11.0` → [Updates: `v4.13.0`]
- `registry.k8s.io/sig-storage/csi-resizer v2.1.0` → [Updates: `v2.2.1`]
- `registry.k8s.io/sig-storage/csi-node-driver-registrar v2.16.0` → [Updates: `v2.18.0`]

kubernetes (8)

deploy/kubernetes/base/accounts-roles-bindings.yaml (2)

- `ClusterRole rbac.authorization.k8s.io/v1`
- `ClusterRoleBinding rbac.authorization.k8s.io/v1`

deploy/kubernetes/base/csi-driver-instance.yaml (1)

- `CSIDriver storage.k8s.io/v1`

deploy/kubernetes/base/csi-storageclass.yaml (2)

- `StorageClass storage.k8s.io/v1`
- `StorageClass storage.k8s.io/v1`

deploy/kubernetes/base/ds-csi-linode-node.yaml (2)

- `registry.k8s.io/sig-storage/csi-node-driver-registrar v2.16.0` → [Updates: `v2.18.0`]
- `DaemonSet apps/v1`

deploy/kubernetes/base/ss-csi-linode-controller.yaml (4)

- `registry.k8s.io/sig-storage/csi-provisioner v6.2.0` → [Updates: `v6.3.0`]
- `registry.k8s.io/sig-storage/csi-attacher v4.11.0` → [Updates: `v4.13.0`]
- `registry.k8s.io/sig-storage/csi-resizer v2.1.0` → [Updates: `v2.2.1`]
- `StatefulSet apps/v1`

deploy/kubernetes/sidecars/external-attacher/rbac.yaml (4)

- `ClusterRole rbac.authorization.k8s.io/v1`
- `ClusterRoleBinding rbac.authorization.k8s.io/v1`
- `Role rbac.authorization.k8s.io/v1`
- `RoleBinding rbac.authorization.k8s.io/v1`

deploy/kubernetes/sidecars/external-provisioner/rbac.yaml (4)

- `ClusterRole rbac.authorization.k8s.io/v1`
- `ClusterRoleBinding rbac.authorization.k8s.io/v1`
- `Role rbac.authorization.k8s.io/v1`
- `RoleBinding rbac.authorization.k8s.io/v1`

deploy/kubernetes/sidecars/external-resizer/rbac.yaml (4)

- `ClusterRole rbac.authorization.k8s.io/v1`
- `ClusterRoleBinding rbac.authorization.k8s.io/v1`
- `Role rbac.authorization.k8s.io/v1`
- `RoleBinding rbac.authorization.k8s.io/v1`

kustomize (1)

deploy/kubernetes/overlays/dev/kustomization.yaml

mise (1)

mise.toml (16)

- `ctlptl 0.9.4` → [Updates: `0.9.6`]
- `ginkgo 2.32.0` → [Updates: `2.33.0`]
- `go 1.26.7` → [Updates: `1.27.1`]
- `golangci-lint 2.11.4` → [Updates: `2.13.2`]
- `kind 0.32.0` → [Updates: `0.33.0`]
- `kubectl 1.36.2` → [Updates: `1.37.0`]
- `kustomize 5.8.1`
- `go:github.com/kyverno/chainsaw 0.2.15`
- `go:golang.org/x/vuln/cmd/govulncheck 1.1.4` → [Updates: `1.8.0`]
- `go:github.com/golang/mock/mockgen 1.6.0`
- `go:github.com/kubernetes-csi/csi-test/v5/cmd/csi-sanity 5.5.0` → [Updates: `5.6.0`]
- `yq 4.52.2` → [Updates: `4.53.6`]
- `envsubst 1.4.3`
- `jq 1.8.2`
- `clusterctl 1.13.3` → [Updates: `1.14.2`]
- `just 1.58.0`

regex (1)

helm-chart/csi-driver/values.yaml (4)

- `registry.k8s.io/sig-storage/csi-provisioner v6.2.0` → [Updates: `v6.3.0`]
- `registry.k8s.io/sig-storage/csi-attacher v4.11.0` → [Updates: `v4.13.0`]
- `registry.k8s.io/sig-storage/csi-resizer v2.1.0` → [Updates: `v2.2.1`]
- `registry.k8s.io/sig-storage/csi-node-driver-registrar v2.16.0` → [Updates: `v2.18.0`]

---

- [ ] Check this box to trigger a request for Renovate to run again on this repository

Review the dependency entries in go.mod, Dockerfile, Dockerfile.dev, .github/workflows, helm-chart/csi-driver/values.yaml, and deploy/kubernetes manifests. Start by comparing the listed Renovate updates with the current files and project validation workflow. Done means the selected dependency updates are applied consistently and the repository’s checks pass.

Written by the indexing model from the issue text.