openshift / openshift/ocm-container

Dependency Dashboard

Open
#346 0 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Dominant language
Go
Stars
15
Forks
74
Avg merge
1h 27m
Merged PRs (30d)
10

Description

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Repository Problems

Renovate tried to run on this repository, but found these problems.

  • ⚠️ WARN: Cannot access vulnerability alerts. Please ensure permissions have been granted.
  • ⚠️ WARN: Some release(s) did not have a releaseTimestamp, but as we're running with minimumReleaseAgeBehaviour=timestamp-optional, proceeding. See debug logs for more information
  • ⚠️ WARN: Dependency name is unset, skipping

Abandoned Dependencies

The following dependencies have not received updates for an extended period and may be unmaintained.

View abandoned dependencies (28)

[!NOTE]
Packages are marked as abandoned when they exceed the abandonmentThreshold since their last release. Unlike deprecated packages with official notices, abandonment is detected by release inactivity.

Datasource Package Last Updated
gomod github.com/99designs/go-keychain 2016-01-05
gomod github.com/99designs/keyring 2022-12-19
gomod github.com/aymerick/douceur 2015-08-27
gomod github.com/beorn7/perks 2019-07-31
gomod github.com/cespare/xxhash/v2 2024-04-04
gomod github.com/go-task/slim-sprig/v3 2023-09-14
gomod github.com/godbus/dbus 2017-09-18
gomod github.com/golang/glog 2025-04-29
gomod github.com/google/go-cmp 2025-01-14
gomod github.com/google/uuid 2024-01-23
gomod github.com/gorilla/css 2023-10-18
gomod github.com/gsterjov/go-libsecret 2016-10-01
gomod github.com/inconshreveable/mousetrap 2022-11-27
gomod github.com/json-iterator/go 2021-09-11
gomod github.com/mgutz/ansi 2020-07-06
gomod github.com/microcosm-cc/bluemonday 2024-07-04
gomod github.com/mitchellh/go-homedir 2019-01-27
gomod github.com/modern-go/concurrent 2018-03-06
gomod github.com/modern-go/reflect2 2021-09-11
gomod github.com/mtibben/percent 2020-04-23
gomod github.com/munnerz/goautoneg 2019-10-10
gomod github.com/skratchdot/open-golang 2020-01-16
gomod github.com/spf13/afero 2025-09-08
gomod github.com/spf13/cast 2025-09-08
gomod github.com/spf13/pflag 2025-09-02
gomod github.com/spf13/viper 2025-09-08
gomod github.com/subosito/gotenv 2023-08-15
gomod gopkg.in/yaml.v3 2022-05-27

[!WARNING]
Renovate failed to look up the following dependencies: Could not determine new digest for update (go package github.com/godbus/dbus).

Files affected: go.mod

Other Branches

The following updates are pending. To force the creation of a PR, click on a checkbox below.

  • chore(deps): update gomod dependencies (github.com/99designs/go-keychain, github.com/openshift-online/ocm-cli)

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

  • chore(deps): update konflux references (quay.io/konflux-ci/tekton-catalog/task-apply-tags, quay.io/konflux-ci/tekton-catalog/task-build-image-index, quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta, quay.io/konflux-ci/tekton-catalog/task-clair-scan, quay.io/konflux-ci/tekton-catalog/task-clamav-scan, quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks, quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta, quay.io/konflux-ci/tekton-catalog/task-init, quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta, quay.io/konflux-ci/tekton-catalog/task-push-dockerfile-oci-ta, quay.io/konflux-ci/tekton-catalog/task-rpms-signature-scan, quay.io/konflux-ci/tekton-catalog/task-sast-shell-check-oci-ta, quay.io/konflux-ci/tekton-catalog/task-sast-snyk-check-oci-ta, quay.io/konflux-ci/tekton-catalog/task-sast-unicode-check-oci-ta, quay.io/konflux-ci/tekton-catalog/task-source-build-oci-ta)

PR Closed (Blocked)

The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.

Detected Dependencies

gomod (1)
go.mod (68)
  • go 1.26.0
  • github.com/mgutz/ansi v0.0.0-20200706080929-d51e80ef957d@d51e80ef957d
  • github.com/onsi/ginkgo/v2 v2.32.2 → [Updates: v2.33.0]
  • github.com/onsi/gomega v1.43.0 → [Updates: v1.43.1]
  • github.com/openshift-online/ocm-common v0.0.45
  • github.com/openshift-online/ocm-sdk-go v0.1.512 → [Updates: v0.1.513]
  • github.com/sirupsen/logrus v1.10.2
  • github.com/spf13/afero v1.15.0
  • github.com/spf13/cobra v1.10.2
  • github.com/spf13/pflag v1.0.10
  • github.com/spf13/viper v1.21.0
  • golang.org/x/term v0.46.0
  • github.com/99designs/go-keychain v0.0.0-20191008050251-8e49817e8af4@8e49817e8af4 → [Updates: v0.0.0-20191008050251-8e49817e8af4]
  • github.com/99designs/keyring v1.2.2
  • github.com/Masterminds/semver/v3 v3.5.0
  • github.com/aymerick/douceur v0.2.0
  • github.com/beorn7/perks v1.0.1
  • github.com/cenkalti/backoff/v4 v4.3.0 → [Updates: v7.0.0]
  • github.com/cespare/xxhash/v2 v2.3.0
  • github.com/danieljoos/wincred v1.2.3
  • github.com/dvsekhvalnov/jose2go v1.11.0
  • github.com/fsnotify/fsnotify v1.10.1
  • github.com/go-logr/logr v1.4.4
  • github.com/go-task/slim-sprig/v3 v3.0.0
  • github.com/go-viper/mapstructure/v2 v2.5.0
  • github.com/godbus/dbus v0.0.0-20190726142602-4481cbc300e2@4481cbc300e2
  • github.com/godbus/dbus/v5 v5.2.2
  • github.com/golang-jwt/jwt/v4 v4.5.2 → [Updates: v5.3.1]
  • github.com/golang/glog v1.2.5
  • github.com/google/go-cmp v0.7.0
  • github.com/google/pprof v0.0.0-20260906184651-6331bc6350fe@6331bc6350fe
  • github.com/google/uuid v1.6.0
  • github.com/gorilla/css v1.0.1
  • github.com/gsterjov/go-libsecret v0.0.0-20161001094733-a6f4afe4910c@a6f4afe4910c
  • github.com/inconshreveable/mousetrap v1.1.0
  • github.com/json-iterator/go v1.1.12
  • github.com/mattn/go-colorable v0.1.15
  • github.com/mattn/go-isatty v0.0.24
  • github.com/microcosm-cc/bluemonday v1.0.27
  • github.com/mitchellh/go-homedir v1.1.0
  • github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd@bacd9c7ef1dd
  • github.com/modern-go/reflect2 v1.0.3-0.20250322232337-35a7c28c31ee@35a7c28c31ee
  • github.com/mtibben/percent v0.2.1
  • github.com/munnerz/goautoneg v0.0.0-20191010083416-a7dc8b61c822@a7dc8b61c822
  • github.com/openshift-online/ocm-api-model/clientapi v0.0.468
  • github.com/openshift-online/ocm-api-model/model v0.0.468
  • github.com/openshift-online/ocm-cli v1.0.15 → [Updates: v1.0.17]
  • github.com/pelletier/go-toml/v2 v2.4.3
  • github.com/prometheus/client_golang v1.24.1
  • github.com/prometheus/client_model v0.6.3
  • github.com/prometheus/common v0.71.0
  • github.com/prometheus/procfs v0.22.0
  • github.com/rogpeppe/go-internal v1.16.0
  • github.com/sagikazarmark/locafero v0.12.0
  • github.com/skratchdot/open-golang v0.0.0-20200116055534-eef842397966@eef842397966
  • github.com/spf13/cast v1.10.0
  • github.com/subosito/gotenv v1.6.0
  • github.com/zalando/go-keyring v0.2.8
  • go.yaml.in/yaml/v3 v3.0.5
  • golang.org/x/mod v0.41.0
  • golang.org/x/net v0.59.0
  • golang.org/x/oauth2 v0.37.0
  • golang.org/x/sync v0.23.0
  • golang.org/x/sys v0.48.0
  • golang.org/x/text v0.42.0
  • golang.org/x/tools v0.50.0
  • google.golang.org/protobuf v1.36.12
  • gopkg.in/yaml.v3 v3.0.1
tekton (7)
.tekton/ocm-container-micro-pull-request.yaml
.tekton/ocm-container-micro-push.yaml
.tekton/ocm-container-minimal-pull-request.yaml
.tekton/ocm-container-minimal-push.yaml
.tekton/ocm-container-pull-request.yaml
.tekton/ocm-container-push.yaml
.tekton/pipeline-pull-request-build-image.yaml (18)
  • quay.io/konflux-ci/tekton-catalog/task-init 0.4.3@sha256:0e30ff33f81c077fd214d02c7bd2310381e7eac66b5e4b367db224e0062b110e → [Updates: 0.4.3]
  • quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta 0.2.5@sha256:0ea91d9680ca9aad79b9d20235f98ad8a7cd3b4addca58766cedf22bba6d633b → [Updates: 0.2.6, 0.2.5]
  • quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta 0.7.1@sha256:b8c8ad3f6e0a89a498ace429b81c4b334241d4f8bab2f16dc3dcb3c55db85456 → [Updates: 0.10.3, 0.7.1]
  • quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta 0.11.2@sha256:62c1e7b4b04af0fdd2fb1033d81a692f25269782b48b721166fd47e3d42eaf7d → [Updates: 0.12.1, 0.11.2]
  • quay.io/konflux-ci/tekton-catalog/task-build-image-index 0.3.1@sha256:354696b203e42e6991bda5a081d95ee311c065608a87f5d57bb8bf129e081372 → [Updates: 0.3.1]
  • quay.io/konflux-ci/tekton-catalog/task-source-build-oci-ta 0.3@sha256:1f64ec60a08269bb442b78c1ceec4b5427b1bbdfa96da271ad18fc09c036acc9 → [Updates: 0.3.1, 0.3]
  • quay.io/konflux-ci/tekton-catalog/task-deprecated-image-check 0.5@sha256:0ccc688a77e9b7b0b8973c132a1e840844137e77f887be4a0bec8893b0776872
  • quay.io/konflux-ci/tekton-catalog/task-clair-scan 0.3.2@sha256:f5b4415db9ac1fba3e11d993a617e0b275d1f0ed2fc669b12c400ed848c39174 → [Updates: 0.4.1]
  • quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks 0.2@sha256:e438f3104d706f73812994953d3d0a9c62ac8e4a372d86337ff26bbca9902709 → [Updates: 0.2]
  • quay.io/konflux-ci/tekton-catalog/task-sast-snyk-check-oci-ta 0.5@sha256:b78e9c05c5126613eddee53f2f3534a9b86bfca17d903599f2fa465b7938e241 → [Updates: 0.5]
  • quay.io/konflux-ci/tekton-catalog/task-clamav-scan 0.3.1@sha256:53a02326bfb930ca5ef6bfa7a33acca833d57752f34f3cb79255fe2e25e7d217 → [Updates: 0.3.3]
  • quay.io/konflux-ci/tekton-catalog/task-sast-coverity-check-oci-ta 0.3@sha256:e92d00ed858233d0096627861192d3e4fc013cf1559c0d0b0ea0657d3377ce75
  • quay.io/konflux-ci/tekton-catalog/task-coverity-availability-check 0.2@sha256:8b501440a960aec446db2ebc6625a49d0317a9fc7bf0f7bd9b18cb63052db7de
  • quay.io/konflux-ci/tekton-catalog/task-sast-shell-check-oci-ta 0.1@sha256:beb05ae2fad733783b3b17e05871e0eaf527a07c904cf3fb2cb551025007eec1 → [Updates: 0.1]
  • quay.io/konflux-ci/tekton-catalog/task-sast-unicode-check-oci-ta 0.4@sha256:d09f717cb84f0699a531773bc498745deef2c006a81918aa73b3be6d2f4778bd → [Updates: 0.4]
  • quay.io/konflux-ci/tekton-catalog/task-apply-tags 0.3@sha256:4765f202dd6252729b632380dfcabecb505c1edf05852a575ce2cc79484b1321 → [Updates: 0.3.1, 0.3]
  • quay.io/konflux-ci/tekton-catalog/task-push-dockerfile-oci-ta 0.3.1@sha256:4dfb6200125c49b7e671ba7e476d74ee20ddeadd4af8641f0b150c43c083630a → [Updates: 0.3.1]
  • quay.io/konflux-ci/tekton-catalog/task-rpms-signature-scan 0.2.1@sha256:f53e60d7d4fd49546dbbc7298f4fbc8c2f2deea1d2ecac2a53822683480f8e2e → [Updates: 0.2.2, 0.2.1]

Contributor guide

No contributing guide indexed for this repository

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

This is an automated Renovate dashboard rather than a scoped task. Start with go.mod and the listed .tekton pipeline files, then read the linked Dependency Dashboard documentation. No single completion condition is given; dependency changes are represented by the listed checkboxes and pull requests.

Written by the indexing model from the issue text.

Assessment

Tech stack
go
Domain
ci-cd, devops
Issue type
Refactor
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
15/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.