openshift / openshift/rosa

Dependency Dashboard

Open
#3,397 0 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Dominant language
Go
Stars
103
Forks
257
Avg merge
2d 21h
Merged PRs (30d)
43

Description

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Repository Problems

Renovate tried to run on this repository, but found these problems.

  • ⚠️ WARN: Some release(s) did not have a releaseTimestamp, but as we're running with minimumReleaseAgeBehaviour=timestamp-optional, proceeding. See debug logs for more information

PR Edited (Blocked)

The following updates have been manually edited so Renovate will no longer make changes. To discard all commits and start over, click on a checkbox below.

  • OCM-00000 | ci: Update Konflux references (quay.io/konflux-ci/tekton-catalog/task-apply-tags, quay.io/konflux-ci/tekton-catalog/task-build-image-index, quay.io/konflux-ci/tekton-catalog/task-buildah-oci-ta, quay.io/konflux-ci/tekton-catalog/task-clair-scan, quay.io/konflux-ci/tekton-catalog/task-clamav-scan, quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks, quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta, quay.io/konflux-ci/tekton-catalog/task-init, quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta, quay.io/konflux-ci/tekton-catalog/task-push-dockerfile-oci-ta, quay.io/konflux-ci/tekton-catalog/task-rpms-signature-scan, quay.io/konflux-ci/tekton-catalog/task-sast-shell-check-oci-ta, quay.io/konflux-ci/tekton-catalog/task-sast-snyk-check-oci-ta, quay.io/konflux-ci/tekton-catalog/task-sast-unicode-check-oci-ta, quay.io/konflux-ci/tekton-catalog/task-show-sbom, quay.io/konflux-ci/tekton-catalog/task-source-build-oci-ta)
  • OCM-00000 | ci: Update registry.access.redhat.com/ubi9/go-toolset Docker tag to v1.26.7-1789040808
  • OCM-00000 | ci: Update aws-sdk (github.com/aws/aws-sdk-go-v2, github.com/aws/aws-sdk-go-v2/config, github.com/aws/aws-sdk-go-v2/credentials, github.com/aws/aws-sdk-go-v2/service/cloudformation, github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs, github.com/aws/aws-sdk-go-v2/service/ec2, github.com/aws/aws-sdk-go-v2/service/iam, github.com/aws/aws-sdk-go-v2/service/organizations, github.com/aws/aws-sdk-go-v2/service/route53, github.com/aws/aws-sdk-go-v2/service/s3, github.com/aws/aws-sdk-go-v2/service/secretsmanager, github.com/aws/aws-sdk-go-v2/service/servicequotas, github.com/aws/aws-sdk-go-v2/service/sts, github.com/aws/smithy-go)

Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

  • OCM-00000 | ci: Update module github.com/openshift-online/ocm-sdk-go to v0.1.513
  • OCM-00000 | ci: Update testing (github.com/onsi/ginkgo/v2, github.com/onsi/gomega)

PR Closed (Blocked)

The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.

Detected Dependencies

dockerfile (5)
Dockerfile (1)
  • registry.access.redhat.com/ubi9/go-toolset 1.26.5-1784190466 → [Updates: 1.26.7-1789040808, 9.8-1789040808]
Dockerfile.clients (1)
  • registry.access.redhat.com/ubi9/go-toolset 1.26.5-1784190466 → [Updates: 1.26.7-1789040808, 9.8-1789040808]
images/Dockerfile.e2e (3)
  • registry.access.redhat.com/ubi9/go-toolset 1.26.5-1784190466 → [Updates: 1.26.7-1789040808, 9.8-1789040808]
  • registry.access.redhat.com/ubi9/go-toolset 1.26.5-1784190466 → [Updates: 1.26.7-1789040808, 9.8-1789040808]
  • registry.access.redhat.com/ubi9/go-toolset 1.26.5-1784190466 → [Updates: 1.26.7-1789040808, 9.8-1789040808]
images/Dockerfile.konflux (1)
  • registry.access.redhat.com/ubi9/go-toolset 1.26.5-1784190466 → [Updates: 1.26.7-1789040808, 9.8-1789040808]
images/Dockerfile.release
gomod (1)
go.mod (43)
  • go 1.26.5
  • github.com/AlecAivazis/survey/v2 v2.3.7
  • github.com/Masterminds/semver v1.5.0
  • github.com/aws/aws-sdk-go-v2 v1.42.1 → [Updates: v1.47.0]
  • github.com/aws/aws-sdk-go-v2/config v1.32.30 → [Updates: v1.33.5]
  • github.com/aws/aws-sdk-go-v2/credentials v1.19.29 → [Updates: v1.20.5]
  • github.com/aws/aws-sdk-go-v2/service/cloudformation v1.74.1 → [Updates: v1.81.0]
  • github.com/aws/aws-sdk-go-v2/service/ec2 v1.316.1 → [Updates: v1.332.0]
  • github.com/aws/aws-sdk-go-v2/service/iam v1.55.1 → [Updates: v1.64.0]
  • github.com/aws/aws-sdk-go-v2/service/organizations v1.52.1 → [Updates: v1.60.0]
  • github.com/aws/aws-sdk-go-v2/service/s3 v1.105.2 → [Updates: v1.113.1]
  • github.com/aws/aws-sdk-go-v2/service/secretsmanager v1.43.1 → [Updates: v1.50.0]
  • github.com/aws/aws-sdk-go-v2/service/servicequotas v1.36.1 → [Updates: v1.43.0]
  • github.com/aws/aws-sdk-go-v2/service/sts v1.44.1 → [Updates: v1.51.0]
  • github.com/aws/smithy-go v1.27.4 → [Updates: v1.28.1]
  • github.com/briandowns/spinner v1.23.2
  • github.com/golang-jwt/jwt/v4 v4.5.2 → [Updates: v5.3.1]
  • github.com/golang/glog v1.2.5
  • github.com/google/go-cmp v0.7.0
  • github.com/hashicorp/go-version v1.9.0
  • github.com/onsi/ginkgo/v2 v2.32.2 → [Updates: v2.33.0]
  • github.com/onsi/gomega v1.43.0 → [Updates: v1.43.1]
  • github.com/openshift-online/ocm-api-model/clientapi v0.0.468
  • github.com/openshift-online/ocm-common v0.0.45
  • github.com/openshift-online/ocm-sdk-go v0.1.512 → [Updates: v0.1.513]
  • github.com/robfig/cron/v3 v3.0.1
  • github.com/sirupsen/logrus v1.10.2
  • github.com/spf13/cobra v1.10.2
  • github.com/spf13/pflag v1.0.10
  • github.com/zgalor/weberr v0.9.0
  • go.uber.org/mock v0.6.0
  • gopkg.in/yaml.v3 v3.0.1
  • k8s.io/apimachinery v0.37.0
  • k8s.io/utils v0.0.0-20260707023825-cf1189d6abe3@cf1189d6abe3
  • sigs.k8s.io/yaml v1.6.0
  • github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs v1.79.1 → [Updates: v1.88.0]
  • github.com/aws/aws-sdk-go-v2/service/route53 v1.64.1 → [Updates: v1.70.0]
  • github.com/go-logr/logr v1.4.4
  • golang.org/x/crypto v0.57.0
  • golang.org/x/net v0.59.0
  • golang.org/x/term v0.46.0
  • golang.org/x/text v0.42.0
  • github.com/kubermatic/glog-logrus v0.0.0-20180829085450-3fa5b9870d1d@3fa5b9870d1d
pre-commit (1)
.pre-commit-config.yaml (1)
  • gitleaks/gitleaks v8.30.1@83d9cd684c87d95d656c1458ef04895a7f1cbd8e
regex (1)
hack/govulncheck.sh (1)
  • jqlang/jq 1.8.2
tekton (1)
.tekton/rosa-github-release.yaml (19)
  • quay.io/konflux-ci/tekton-catalog/task-init 0.4@sha256:5a423246792ac501ea279229b42ee57da9927da441c04b5c9ff86817b0856b08 → [Updates: 0.4.3]
  • quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta 0.2@sha256:e5ba1f8549e6a0f043629ef00bea7511957121e05304b688f40ff12304560f38 → [Updates: 0.2.6]
  • quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta 0.9.0@sha256:4486aaa69770d6b27c59c8df7d82e450d95dab2302aef9b8a345f2ac0fabbab0 → [Updates: 0.10.3]
  • quay.io/konflux-ci/tekton-catalog/task-buildah-oci-ta 0.12.0@sha256:de5580c99ca52588f9b8cec452023bc7e3de470a594c99243320752d250bb2a2 → [Updates: 0.12.1, 0.12.0]
  • quay.io/konflux-ci/tekton-catalog/task-build-image-index 0.3@sha256:d52f2cdd06eace149f75e2a874b70875b7d43a825e6ebed6d52ab84d0a2059e5 → [Updates: 0.3.1]
  • quay.io/konflux-ci/tekton-catalog/task-source-build-oci-ta 0.3@sha256:c7ecd1e518007e31e19188333a17dd3558e222ce2e3b2a484a1e59ec069799cf → [Updates: 0.3.1, 0.3]
  • quay.io/konflux-ci/tekton-catalog/task-deprecated-image-check 0.5@sha256:0ccc688a77e9b7b0b8973c132a1e840844137e77f887be4a0bec8893b0776872
  • quay.io/konflux-ci/tekton-catalog/task-clair-scan 0.3@sha256:f5b4415db9ac1fba3e11d993a617e0b275d1f0ed2fc669b12c400ed848c39174 → [Updates: 0.4.1]
  • quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks 0.2@sha256:4619769705d4999e129b779d7699d89d33c47f7ab80d73ad6e3dcd8a6a4e43a7 → [Updates: 0.2]
  • quay.io/konflux-ci/tekton-catalog/task-clamav-scan 0.3@sha256:53a02326bfb930ca5ef6bfa7a33acca833d57752f34f3cb79255fe2e25e7d217 → [Updates: 0.3.3, 0.3]
  • quay.io/konflux-ci/tekton-catalog/task-sast-coverity-check-oci-ta 0.3@sha256:e92d00ed858233d0096627861192d3e4fc013cf1559c0d0b0ea0657d3377ce75
  • quay.io/konflux-ci/tekton-catalog/task-coverity-availability-check 0.2@sha256:8b501440a960aec446db2ebc6625a49d0317a9fc7bf0f7bd9b18cb63052db7de
  • quay.io/konflux-ci/tekton-catalog/task-sast-snyk-check-oci-ta 0.5@sha256:b78e9c05c5126613eddee53f2f3534a9b86bfca17d903599f2fa465b7938e241 → [Updates: 0.5]
  • quay.io/konflux-ci/tekton-catalog/task-sast-shell-check-oci-ta 0.1@sha256:beb05ae2fad733783b3b17e05871e0eaf527a07c904cf3fb2cb551025007eec1 → [Updates: 0.1]
  • quay.io/konflux-ci/tekton-catalog/task-sast-unicode-check-oci-ta 0.4@sha256:d09f717cb84f0699a531773bc498745deef2c006a81918aa73b3be6d2f4778bd → [Updates: 0.4]
  • quay.io/konflux-ci/tekton-catalog/task-apply-tags 0.3@sha256:f89a59d4d043fd3c545a9cb5e89b53396f1e04017c6f68da1e50626715c2d423 → [Updates: 0.3.1, 0.3]
  • quay.io/konflux-ci/tekton-catalog/task-push-dockerfile-oci-ta 0.3@sha256:f3e97e6eaf09d6585e915c3e7b82d110d97e34202bf591a2d990127ba5bb362d → [Updates: 0.3.1]
  • quay.io/konflux-ci/tekton-catalog/task-rpms-signature-scan 0.2@sha256:cc5133504ff03909ae970db81a986cb25a5532b2faf62a8ede5c60f28b716f54 → [Updates: 0.2.2, 0.2]
  • quay.io/konflux-ci/tekton-catalog/task-show-sbom 0.1@sha256:8fe70a95c28b1ac92abd67a7477ad960218f3f570a9f8a12ad082dff7e9c9579 → [Updates: 0.3]

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Review the Dependency Dashboard, starting with go.mod, the Dockerfiles, .pre-commit-config.yaml, hack/govulncheck.sh, and .tekton/rosa-github-release.yaml. Check the pending and blocked updates and the referenced pull requests before choosing a scope; done would require validating the selected dependency changes, but this issue does not define one focused change.

Written by the indexing model from the issue text.

Assessment

Tech stack
docker, github-actions, go
Domain
build-system, devops
Issue type
Refactor
Difficulty
4/5
Estimated time
3-5 days
Activity status
Quiet
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.